> For the complete documentation index, see [llms.txt](https://docs.recaptime.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.recaptime.dev/community-sso/getting-started/multifactor-authentication.md). # Multifactor authentication ## Adding a new method ### Backup codes / Static tokens We recommend getting backup codes as a recovery option in case you misplace your device where you keep TOTP codes or use as a passkey. Each set of static tokens are 6 random 12-character token generated by Authentik. 1. [Go to your user dashboard](https://authentik.recaptime.dev/if/user/) > :gear: **(User settings)** > **MFA Devices** ([direct link](https://authentik.recaptime.dev/if/user/#/settings;%7B%22page%22%3A%22page-mfa%22%7D)). 2. After clicking **Enroll**, select **Static tokens** ([direct link](https://authentik.recaptime.dev/flows/-/configure/8b2739d1-84a6-4850-817c-730d90df9b5c/?next=%2Fif%2Fuser%2F%23%2Fsettings%3B%7B%22page%22%3A%22page-mfa%22%7D)) to get started. 3. A set of backup codes are shown on your screen. Store them in a secure place since this will be the last time you will see them. 4. Once you saved a copy of them, click Continue to confirm and return back to the MFA Devices page. If you missed or lost them, you have to repeat the above steps and delete the previous set. ### Time-based OTPs TOTP codes are a secure way to protect your account against password leakages and unauthorized access, although you need extra caution regarding site impersonation and phishing attacks. This can be also used as an additional method for situations where you can't use passkeys or security keys to sign in. ### Security keys and passkeys Using passkeys and security keys give you highest level of security against site impersonation and phishing attacks and can be also used for passwordless sign-ins. 1. [Go to your user dashboard](https://authentik.recaptime.dev/if/user/) > :gear: **(User settings)** > **MFA Devices** ([direct link](https://authentik.recaptime.dev/if/user/#/settings;%7B%22page%22%3A%22page-mfa%22%7D)). 2. After clicking Enroll, select **WebAuthn device** ([direct link](https://authentik.recaptime.dev/flows/-/configure/f2bf2d0c-9138-4630-b9ae-fa440ef2b50c/?next=%2Fif%2Fuser%2F%23%2Fsettings%3B%7B%22page%22%3A%22page-mfa%22%7D)) to get started. 3. Follow your password manager or browser prompts to add a credential to your vault or device. 4. Once successful, you will redirected back to the same screen where you can manage existing methods and add additional ones. ## Managing your methods To manage your 2FA methods, visit your user settings then navigate to MFA Devices tab ([direct link](https://authentik.recaptime.dev/if/user/#/settings;%7B%22page%22%3A%22page-mfa%22%7D)). To rename a method or device, click the :pencil: (Edit) icon besides the corresponding ## A note on social logins At the moment, signing in with social logins bypasses your multifactor authentication setup, which may or may not intentional for some users. We recommend enabling multifactor authentication with your linked social accounts as well with recovery codes kept safe in a secure location. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.recaptime.dev/community-sso/getting-started/multifactor-authentication.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.