Enabling two-factor authentication

Two-factor authentication adds an extra layer of security to your Watchful account.

When two-factor authentication is enabled, signing in requires both your password and a six-digit verification code generated by a compatible authenticator app. The code changes every 30 seconds.

Watchful uses time-based one-time passwords (TOTP), so you can use any authenticator app that supports this standard.

Enable two-factor authentication

Before you begin, make sure you have a compatible authenticator app installed on a device you can access.

1. Log in to your Watchful account.
2. Open Account & subscription.
3. Select the 2-factor Auth tab.
4. Follow the instructions in the Google Authenticator section to enable two-factor authentication.
5. Open your authenticator app and scan the QR code displayed by Watchful.
6. If you cannot scan the QR code, enter the provided secret key manually in your authenticator app.
7. Your authenticator app will add Watchful and begin generating six-digit verification codes.
8. Complete the setup in Watchful using the verification code generated by your authenticator app.

Once enabled, Watchful displays the confirmation message Your account has 2FA enabled.

Generate backup codes

Watchful can generate one-time emergency passwords that you can use if you lose access to your authenticator app or authentication device.

To generate backup codes:

1. Open Account & subscription.
2. Select the 2-factor Auth tab.
3. Click Generate One Time Emergency passwords.
4. Save the generated passwords in a secure location.

Each emergency password can be used only once and is destroyed after it has been used.

Keep your emergency passwords somewhere secure and separate from the device you normally use for two-factor authentication.

Logging in with two-factor authentication

After two-factor authentication is enabled, log in to Watchful with your username and password as usual.

When prompted, open your authenticator app and enter the current six-digit verification code in the 2-factor authentication field.

Because the code changes every 30 seconds, always use the code currently displayed in your authenticator app.

If you lose access to your authenticator app

If you no longer have access to your authenticator app or authentication device, use one of your saved emergency passwords instead of a regular verification code.

Once you regain access to your account, return to Account & subscription → 2-factor Auth and generate a new set of emergency passwords if needed.

Disable two-factor authentication

To remove two-factor authentication from your account:

1. Open Account & subscription.
2. Select the 2-factor Auth tab.
3. Click Remove 2FA.
4. Confirm the change if prompted.

After two-factor authentication is removed, Watchful will no longer require an authenticator code when you log in.