2FA Config

Configure and prioritize two-factor authentication methods. Drag to reorder priority. The top-most enabled method will be the primary choice for users.

Voice Call

Call the user and read a one-time code over the phone.

Google Authenticator (TOTP)

Users scan a QR code once, then generate codes from any TOTP app.

SMS OTP

Send a one-time code via SMS through a connected messaging provider.

Email OTP

DEFAULT

Send a one-time code to the user's registered email address.

WhatsApp OTP

Send a one-time code via WhatsApp through a connected provider.

Face ID / Bio

Use device biometrics if supported by the client app.

Changes take effect immediately for policy checks. Users will be prompted on next login once enrollment is wired to these flags.

Email copy for OTP lives under Message Templates (Auth ► 2FA / email OTP). SMS and Voice SETUP opens the gateway form on this page; you can also use API config on SMS/Voice rows under Message Templates.