# Set up two-factor authentication

## Overview

Two-factor authentication (2FA) adds an additional verification step when signing in to your Caspen workspace. Instead of logging in with just an email and password, users must also enter a one-time verification code generated by an authenticator app on their device.

This means even if someone knows your password, they can’t access your account without the code keeping your practice data safer.

***

## Enable two-factor authentication for your account

1. Go to **Settings** → **Users**.
2. Open your user profile (click your name or go to **Actions** → **Edit**).
3. Navigate to the Security tab.
4. Under Two-factor authentication, click Enable.
5. Follow the setup instructions:

* Download an authenticator app (see recommendations below).
* Open the app and scan the QR code displayed.
* Enter the 6-digit authentication code from the app.

6. Click Enable.

Once enabled, a two-factor authentication badge appears next to your name in the user list.

***

## How it works when logging in

Next time the user signs in, they will enter:

1. Email and password, and
2. A unique one-time verification code generated by their authenticator app.

This code changes every 30 seconds and can only be used once.

***

## What if I lose my device?

If your phone or device with the authenticator app is lost, damaged, or replaced:

* Contact your Workspace Admin
* Ask them to disable 2FA for your account

Once disabled, you can log in normally and re-enable and set up 2FA on your new device.

***

## Recommended authenticator apps

| Platform        | Apps                                                 |
| --------------- | ---------------------------------------------------- |
| iPhone          | Google Authenticator, Authy, Microsoft Authenticator |
| Android         | Google Authenticator, Authy, Microsoft Authenticator |
| Windows devices | Microsoft Authenticator                              |

***

#### Disable 2FA for your own account

1. Go to Settings → Users.
2. Open your user profile (click your name or Actions → Edit).
3. Go to the Security tab.
4. Click Disable.

Your account will return to standard email-and-password login.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://support.caspen.com/using-caspen/settings/set-up-two-factor-authentication.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.