> For the complete documentation index, see [llms.txt](https://helpwith.salesorder.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://helpwith.salesorder.com/setup/configuration/company-security/two-factor-authentication-2fa.md).

# Two-Factor Authentication (2FA)

<mark style="color:orange;">Setup > Configuration > Company Security</mark>&#x20;

Two-Factor Authentication (2FA) adds an extra layer of security to protect your Salesorder account. In addition to their password, the worker must enter a verification code generated by an authentication app based on a secret key unique to each worker.

#### Step 1 — Install an Authentication App

Workers must install an authenticator app on their device:

* Android: [Google Play Store](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2\&pli=1)
* Apple: [App Store](https://apps.apple.com/us/app/google-authenticator/id388497605)
* Chromebook: [Chrome Web Store](https://chromewebstore.google.com/detail/authenticator/npjilhodcgmigpladpfkkclbmkebalfd)

#### Step 2 — Configure 2FA (Admins)

Admins can enable 2FA for the entire company:

1. Go to Setup > Configuration > Company Security.
2. Click Edit.
3. Check Enable Two-Factor Authentication and click Save.

#### Step 3 — Enable 2FA for a Worker (Admins)

To enable 2FA for a specific worker:

1. Go to Workers > \[Select Worker] > Login Details.
2. Click Edit.
3. Check Enable Two-Factor Authentication.
4. Save your changes.

A secret key will be generated and displayed as \*\*\*\*\*\*\*\* in the field. This is unique to this worker.&#x20;

#### Step 4 — 2FA Setup (Workers)

1. The first time the worker logs in (after 2FA enabled), a 2FA setup dialog will appear to complete 2FA configuration. The worker can skip it and complete it later if needed.

To complete 2FA setup the worker should:<br>

1. Scan the QR code using their authentication app, or
2. Copy the secret key and paste it into the app manually.
3. The app will generate a 6-digit verification code
4. The worker enters this code into the setup dialog to confirm 2FA activation.

#### Step 5 — Worker Login Process

1. The next time the worker logs in, the system will require the verification code that the worker can find in the authentication app.
2. The worker can ask the system to mark this device as trusted for the next 60 days and not ask for the verification code this time.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://helpwith.salesorder.com/setup/configuration/company-security/two-factor-authentication-2fa.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.