Home / Docs / Security / Two-Factor Authentication

Two-Factor Authentication (2FA)

Add an extra layer of security to your NugetHosting account.

⏱️ 4 min read

Overview

Two-factor authentication (2FA) protects your account by requiring both your password and a code from your phone to log in.

🔒 Recommended: We strongly recommend enabling 2FA, especially if you manage production packages or have team access.

Supported Methods

Authenticator App (recommended) - Google Authenticator, Authy, 1Password, etc.
Backup Codes - One-time use codes for emergency access

Setting Up 2FA

To enable two-factor authentication:

Go to Settings → Security
Click "Enable Two-Factor Authentication"
Open your authenticator app (Google Authenticator, Authy, etc.)
Scan the QR code displayed on screen
Enter the 6-digit code from your app
Save your backup codes (see below)
Click "Enable 2FA"

💡 Tip: If you can't scan the QR code, click "Can't scan?" to reveal the setup key to enter manually.

Backup Codes

Backup codes let you access your account if you lose your phone. Each code can only be used once.

⚠️ Important: Store your backup codes in a secure location (password manager, safe, etc.). Without them, you may lose access to your account.

Viewing Backup Codes

Go to Settings → Security
Click "View Backup Codes"
Enter your password to confirm
Copy or download your codes

Regenerating Codes

If you've used most of your backup codes or suspect they're compromised, regenerate them from the Security settings. This invalidates all previous codes.

Logging In with 2FA

When logging in with 2FA enabled:

Enter your email and password as usual
You'll be prompted for a verification code
Open your authenticator app
Enter the current 6-digit code
Click "Verify"

Lost your phone?

Use one of your backup codes instead. Each code works only once.

Disabling 2FA

To disable two-factor authentication:

Go to Settings → Security
Click "Disable Two-Factor Authentication"
Enter your password to confirm
Enter a code from your authenticator app
Confirm the action

⚠️ Warning: Disabling 2FA reduces your account security. Only do this if absolutely necessary.

Invoices Access Control