Two-Factor Authentication (2FA)

Two-factor authentication (2FA) adds a second step to signing in: after your password, you enter a short code from an app on your phone. Even if someone learns your password, they can’t get into your account without that code. Turning 2FA on is optional — you choose whether to enable it, and you can turn it off again at any time.

What you’ll need

An authenticator app on your phone or computer. Any standard app works, including:

• Google Authenticator
• 1Password
• Authy
• Microsoft Authenticator

These apps generate a new 6-digit code every 30 seconds. You’ll enter the current code when you sign in.

Turn on two-factor authentication

1. Go to your profile menu (top-right corner) and select My Account.
2. Click Security in the sidebar.
3. Find Two-Factor Authentication and click Enable.
4. A QR code appears. Open your authenticator app and scan it. (If you can’t scan, most apps also let you type in the setup key shown on screen.)
5. Your app now lists a LabelGrid entry with a 6-digit code. Enter the current code to confirm, then save.
6. LabelGrid shows you a set of one-time recovery codes. Save them somewhere safe (see below) before you finish.

That’s it — two-factor authentication is now on.

Save your recovery codes before you close the page

Recovery codes are your backup way in if you ever lose access to your authenticator app. Store them somewhere safe — a password manager, or printed and kept somewhere secure. Don’t keep them only on the same phone as your authenticator app.

Signing in with 2FA turned on

Once 2FA is on, signing in has one extra step:

1. Enter your email and password as usual.
2. When prompted, open your authenticator app and enter the current 6-digit code for LabelGrid.
3. You’re signed in.

The code changes every 30 seconds, so always enter the one showing at that moment. If a code is rejected, wait for the next one to appear and try again.

If you lose access to your authenticator app

If you get a new phone, delete the app, or otherwise can’t get a code, use a recovery code instead:

1. On the code screen at sign-in, choose the option to use a recovery code.
2. Enter one of the recovery codes you saved when you set up 2FA.

Each recovery code works only once. After you sign in, set up your authenticator app again (see Regenerate your recovery codes to get a fresh set).

Out of recovery codes and locked out?

If you’ve used all your recovery codes and no longer have your authenticator app, you won’t be able to complete sign-in on your own. Contact our support team and we’ll help you regain access.

Regenerate your recovery codes

Recovery codes are single-use, so it’s a good idea to generate a fresh set if you’ve used some, or if you think your saved codes may have been seen by someone else.

1. Go to My Account → Security.
2. Under Two-Factor Authentication, choose Regenerate recovery codes.
3. Save the new set somewhere safe.

Generating a new set replaces your old codes — the previous ones stop working immediately.

Turn off two-factor authentication

You can disable 2FA whenever you like:

1. Go to My Account → Security.
2. Under Two-Factor Authentication, click Disable.
3. Confirm by entering your password and a current 6-digit code from your authenticator app.

Once disabled, signing in only asks for your email and password again. You can turn 2FA back on at any time by following the steps above.

---

Need help?

Having trouble with two-factor authentication? Contact our support team and we’ll help.