- Archive
- /
- Account & Security
- /
- Setting Up Two-Factor Authentication
Setting Up Two-Factor Authentication
Learn how to enable two-factor authentication (2FA) in Foreman using an authenticator app and manage recovery codes for secure account access.
Two-factor authentication (2FA) adds an extra layer of security to your Foreman account by requiring a time-based one-time password (TOTP) in addition to your password when signing in.
Two-factor authentication is only available for users who sign in with an email and password. If you sign in exclusively with Autodesk, your account is already protected by Autodesk's own security measures and 2FA settings are not shown.
Prerequisites
- A Foreman account with a password (admin/local accounts).
- An authenticator app installed on your phone, such as Google Authenticator, Microsoft Authenticator, or Authy.
Enabling 2FA
- Navigate to Manage Account from the user menu.
- Select Two-factor authentication from the sidebar.
- Click Set up authenticator app.
- You will see a QR code on screen. Open your authenticator app and scan the QR code. If you cannot scan the code, click Manual entry to reveal the setup key and enter it manually.
- Enter the six-digit verification code displayed by your authenticator app into the Verification Code field.
- Click Verify to complete the setup.
Recovery Codes
After enabling 2FA, Foreman generates a set of recovery codes. These are single-use codes that let you sign in if you lose access to your authenticator app.
Store your recovery codes in a safe place immediately. Each code can only be used once, and if you lose both your authenticator device and your recovery codes, you may be locked out of your account.
To generate a fresh set of recovery codes at any time:
- Go to Manage Account > Two-factor authentication.
- Click Reset recovery codes.
- Save the new codes securely. The previous codes are invalidated.
Signing In with 2FA
- Enter your email and password on the sign-in page as usual.
- When prompted, enter the six-digit code from your authenticator app.
- Optionally check Remember this device to skip 2FA on trusted devices.
If you do not have access to your authenticator app, click Use a recovery code and enter one of your saved recovery codes.
Disabling 2FA
- Go to Manage Account > Two-factor authentication.
- Click Disable 2FA.
- Confirm the action when prompted.
Resetting Your Authenticator
If you need to switch to a new authenticator app or device:
- Go to Manage Account > Two-factor authentication.
- Click Reset authenticator app. This clears the existing key.
- Follow the setup steps again to register your new authenticator app.