> ## Documentation Index
> Fetch the complete documentation index at: https://radarhq.io/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-factor authentication

> Ask for a code from an authenticator app when you sign in, for yourself or for everyone in your organization.

Two-factor authentication (2FA) asks for a 6-digit code from an authenticator app, such as Google Authenticator, 1Password or Authy, after your usual sign-in step. You can turn it on for yourself, and an organization can require it for everyone.

## Turn it on for yourself

Open **Settings → Security** and click **Set up authenticator app**. To confirm it's you, we first email you a code; then scan the QR code with your authenticator app and enter a code from it. From then on, Radar asks for a code every time you sign in, whichever organization you pick. The same page lets you set or change your password, and turn 2FA off.

## Require it for your organization

Email [support@radarhq.io](mailto:support@radarhq.io?subject=Require%20two-factor%20authentication) from an owner's address and name the organization. We'll confirm when it's on. The same steps are in **Settings → Organization → General**, under **Enable MFA**.

Once it's on, everyone who uses the organization needs 2FA:

* **Members who already use 2FA** notice nothing new.
* **Members who don't** are asked to set it up the next time they sign in to the organization: a QR code to scan, then a code to confirm. After that, the code at every sign-in.
* **Members of several organizations** who switch to this one from another are asked to sign in to it again, and to set up 2FA if they haven't.
* **SSO sign-ins:** no code from Radar. Your identity provider handles MFA for people who sign in through it.

## Personal access tokens and agents

Existing [personal access tokens](https://radarhq.io/docs/cloud/personal-access-tokens.md) keep working. Creating a new one needs a session signed in to the organization. An agent connected by signing in may ask you to sign in again once and choose the organization; if the organization requires 2FA, that sign-in asks for the code.

## Lost your authenticator app

Email [support@radarhq.io](mailto:support@radarhq.io) from your account's address. We'll check it's you before resetting 2FA, then you'll set it up again at your next sign-in.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.