> ## Documentation Index
> Fetch the complete documentation index at: https://docs.knotie-ai.pro/llms.txt
> Use this file to discover all available pages before exploring further.

# Multi-factor authentication (MFA)

> Enable MFA for your account and learn our recommendations.

## Overview

MFA adds an extra layer of security by requiring a second factor during sign-in.

## Recommendation

Enable MFA for all partner accounts that manage:

* Customer access
* Domains
* API keys
* Billing (especially Stripe)

If you connect Stripe, we strongly recommend enabling MFA.

## How to set up

1. In the Partner Portal, go to **Settings** → **Profile Settings**.
2. Find the **Security** section (password, MFA, passkeys).
3. Click **Enable MFA**.
4. Scan the QR code using an authenticator app (Google Authenticator, Authy, 1Password, etc.).
5. Save your **backup codes**.

<Note>
  Your password, MFA, and passkey controls all live together under **Settings → Profile Settings**.
</Note>

## Signing in with MFA

Once MFA is on, signing in shows a **Two-Factor Authentication** step after your email and password. You can verify in one of three ways — switch between them using the tabs at the top of the window.

### Authenticator app

Enter the 6-digit code from your authenticator app. This is the default method.

<Frame>
  <img src="https://mintcdn.com/kno2getherlabsltd/J5o1wCtkIoZBzK9I/images/screenshots/mfa-verify-authenticator.png?fit=max&auto=format&n=J5o1wCtkIoZBzK9I&q=85&s=fcf7d41d1fcbda082b9240af103366bb" alt="Two-Factor Authentication window on the Authenticator tab, with a six-digit code field and a Verify button." width="1920" height="913" data-path="images/screenshots/mfa-verify-authenticator.png" />
</Frame>

### Email code

Prefer a code by email? Switch to the **Email** tab and click **Send Email Code** — we'll email you a verification code to enter.

<Frame>
  <img src="https://mintcdn.com/kno2getherlabsltd/J5o1wCtkIoZBzK9I/images/screenshots/mfa-verify-email.png?fit=max&auto=format&n=J5o1wCtkIoZBzK9I&q=85&s=e9cbf29d207e22909daa0bf51abaed46" alt="Two-Factor Authentication window on the Email tab, offering to send a verification code to your email address." width="1920" height="913" data-path="images/screenshots/mfa-verify-email.png" />
</Frame>

### Backup code

Lost access to your authenticator and email? Switch to the **Backup Code** tab and enter one of your 8-character backup codes. Each code works once.

<Frame>
  <img src="https://mintcdn.com/kno2getherlabsltd/J5o1wCtkIoZBzK9I/images/screenshots/mfa-verify-backup.png?fit=max&auto=format&n=J5o1wCtkIoZBzK9I&q=85&s=b9fb8a1a1e330c57acd30accd6100b25" alt="Two-Factor Authentication window on the Backup Code tab, with a field to enter one of your 8-character backup codes." width="1920" height="913" data-path="images/screenshots/mfa-verify-backup.png" />
</Frame>

## Backup codes

Backup codes are a fallback if you lose access to your authenticator app.

In **Settings** → **Profile Settings**, you can generate and download new backup codes.

## Can I disable MFA?

You can disable MFA in **Settings** → **Profile Settings** in some cases.

If Stripe Connect is enabled for your account, MFA may be required (and cannot be disabled while Stripe Connect is active — see the [Stripe Connect](/partner-portal/settings/stripe-connect) doc).

## What the Security section looks like

Under **Settings → Profile Settings**, scroll to **Security Settings**. This is where your password, MFA, and backup codes live.

<Frame>
  <img src="https://mintcdn.com/kno2getherlabsltd/J5o1wCtkIoZBzK9I/images/screenshots/mfa-security-settings.png?fit=max&auto=format&n=J5o1wCtkIoZBzK9I&q=85&s=0e363593c7cdd0dcec45bfa4fbe1962a" alt="Security Settings section of Profile Settings — Multi-Factor Authentication marked Enabled, with Authenticator App and Backup Codes rows and a note that MFA is required while Stripe Connect is active." width="1200" height="600" data-path="images/screenshots/mfa-security-settings.png" />
</Frame>

* **Authenticator App** — the second factor generated by your authenticator app.
* **Backup Codes** — one-time codes to use if you lose your authenticator. Use **Regenerate** to create a fresh set.
* If **Stripe Connect** is active, MFA stays on and can't be disabled.