Two-factor authentication (2FA) adds a second step to each sign-in. After your password, MyWatchtower asks for a 6-digit code from an authenticator app on your phone. A person who knows only your password cannot sign in to your account.
This article is for each person who has a MyWatchtower account. 2FA is optional, and you do not need a permission to turn it on.
What you need
- A phone with an authenticator app that makes TOTP codes, such as Google Authenticator, Microsoft Authenticator or Authy.
- Your MyWatchtower account, signed in.
Open the 2FA row
- On a phone, tap Account in the bottom navigation bar. In the Account settings list, tap Security.
- On a computer, select My account at the bottom of the left navigation. Then select the Security tab.
In the Sign-in card, find the Two-factor authentication (2FA) row. It reads "Codes come from your authenticator app (TOTP)." The button reads Please wait for a moment, then Enable 2FA.
If the row says "We could not check whether two-factor authentication is on.", select Try again.
Turn on 2FA
1. Select Enable 2FA. The Enable two-factor authentication dialog opens. It has three steps: Generate setup, Verify code and Confirmation. On a phone, the steps are Setup, Verify and Done.
2. Wait while the dialog makes your setup. Then it shows Scan QR code.
3. Open your authenticator app, and scan the QR code in the dialog. If you cannot scan the code, copy the code under Or enter this code manually: into your app. To copy the code, select the copy button in the field.
4. Your authenticator app now shows a 6-digit code for MyWatchtower. Type the code under Enter verification code:.
5. Select Verify.
When the code is correct, the dialog closes. This message shows: "Two-factor authentication has been turned on. Please sign in again." MyWatchtower then signs you out on each device. Sign in again with your password and a code.
If the code is wrong or too old, the dialog shows "That code did not work. Enter the current code from your authenticator app." Wait for a new code in your app, then type it.
If you select Cancel before you verify a code, 2FA stays off. MyWatchtower removes the setup that you did not finish. Remove the MyWatchtower entry from your authenticator app too.
Sign in with 2FA
1. On the Sign in page, type your email address and your password, then select Continue.
2. The Two-step verification page opens. Type the 6-digit code from your authenticator app.
3. Select Verify.
To stop the sign-in, select Cancel.
After you turn on 2FA, the 2FA row in Security shows a green Enabled chip. On a phone, the Security item in Account settings reads "Two-factor authentication on".
When you reset a forgotten password, MyWatchtower also asks for a code from your authenticator app. If you change your password in Security, the Update password dialog asks for a code.
Turn off 2FA
1. In the 2FA row, select Disable 2FA. The Disable two-factor authentication dialog opens.
2. Type the current 6-digit code from your authenticator app.
3. Select Disable 2FA.
This message shows: "Two-factor authentication has been turned off. Please sign in again." MyWatchtower signs you out on each device. Sign in again with your password only.
Keep your authenticator app
MyWatchtower does not give backup codes. You need a code from your authenticator app to sign in and to turn off 2FA. Before you replace or reset your phone, move your authenticator app to the new phone. If you cannot get a code, send an email to support@mywatchtower.app.