OSIR · The AI-Native Domain Registrar

Help Center / account

Two-factor authentication

Two-Factor Authentication

Add an extra layer of security to your account with two-factor authentication (2FA).

What is 2FA?

2FA requires two forms of verification:

  1. Something you know (password)
  2. Something you have (phone/security key)

Setting Up 2FA

Using Authenticator App (Recommended)

  1. Go to Settings > Security
  2. Click Enable 2FA
  3. Choose Authenticator App
  4. Scan QR code with your app:
    • Google Authenticator
    • Authy
    • 1Password
    • Microsoft Authenticator
  5. Enter the 6-digit code
  6. Save your backup codes!

Using SMS (Less Secure)

  1. Go to Settings > Security
  2. Click Enable 2FA
  3. Choose SMS
  4. Enter your phone number
  5. Enter verification code
  6. Save backup codes

Backup Codes

Save these immediately! Use if you lose access to your 2FA device.

  • 10 one-time use codes provided
  • Store securely (password manager, safe)
  • Each code works only once
  • Generate new codes anytime in settings

Logging In with 2FA

  1. Enter email and password
  2. Enter 6-digit code from authenticator
  3. Optional: Check "Remember this device" for 30 days

Security Keys (WebAuthn)

For maximum security, use hardware keys:

Supported Keys

  • YubiKey
  • Google Titan
  • Any FIDO2/WebAuthn key

Setup

  1. Go to Security > Security Keys
  2. Click Add Security Key
  3. Insert and touch your key
  4. Name the key
  5. Done!

Recovery Options

Lost access? Use these methods:

Method How
Backup codes Enter one of your saved codes
Recovery email Receive recovery link
Support Verify identity with support team

Managing 2FA

Disable 2FA

  1. Go to Settings > Security
  2. Click Disable 2FA
  3. Enter your password
  4. Confirm

Change 2FA Method

  1. Disable current 2FA
  2. Enable new method

Regenerate Backup Codes

  1. Go to Security > Backup Codes
  2. Click Generate New Codes
  3. Old codes are invalidated

Best Practices

  • Use authenticator app over SMS
  • Add multiple security keys
  • Store backup codes securely
  • Don't share codes with anyone
  • Review login activity regularly