Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security to your account. In addition to your password, you’ll need a code from an authenticator app.

Overview

Setting Up 2FA

Step 1 — Access Settings

1. Log in at coresynth.io 
2. Click on Profile in the top right corner
3. Go to Account Settings
4. Select Two-Factor Authentication

Step 2 — Install Authenticator App

Download an authenticator app:

Step 3 — Scan QR Code

1. In 2FA settings, click Enable 2FA
2. Open your authenticator app
3. Scan the QR code or enter the key manually
4. Enter the 6-digit code from the app to verify
5. Click Confirm

Step 4 — Save Backup Codes

Critical: Save backup codes in a secure location. They are the only way to access your account if you lose your device.

1. After activating 2FA, you’ll see 10 backup codes
2. Download or print the codes
3. Store them securely (password manager, safe)

Logging In with 2FA

After entering your password:

1. Open your authenticator app
2. Enter the current 6-digit code
3. Code is valid for 30 seconds (timer in app)

Tip: If the code doesn’t work, verify your device time is set correctly.

Device Management

In Account Settings > Active Sessions you can see all logged-in devices:

Revoking Devices

1. Go to Account Settings > Active Sessions
2. Find the device you want to revoke
3. Click Revoke

Warning: Revoking all devices will also log you out and you’ll need to log in again.

Using Backup Codes

If you don’t have access to your authenticator app:

1. On the login screen, click Use backup code
2. Enter one backup code
3. The code becomes invalid after use

Note: Each backup code can only be used once. After exhausting all codes, generate new ones.

Regenerating Backup Codes

1. Go to Account Settings > Two-Factor Authentication
2. Click Generate new backup codes
3. Old codes become invalid immediately
4. Save the new codes

Disabling 2FA

1. Go to Account Settings > Two-Factor Authentication
2. Click Disable 2FA
3. Enter your password to confirm
4. Enter code from app (or backup code)
5. Confirm disabling

Warning: Disabling 2FA reduces account security. We recommend keeping 2FA enabled.

Troubleshooting

Lost Device with Authenticator App

Solution:

1. Use a backup code to log in
2. If you don’t have backup codes, contact support
3. After identity verification, 2FA will be reset

Code Not Working

Causes:

• Incorrect time on device
• Wrong QR code scanned
• Expired code (30 seconds)

Solution:

1. Synchronize time on your device
2. Verify you’re using the correct account in the app
3. Wait for a new code

Lost Backup Codes

Solution:

1. If you have 2FA active, you can generate new codes in settings
2. If you can’t access your account, contact support with proof of ownership

Can’t Scan QR Code

Solution:

1. Click Enter key manually
2. Copy the secret key (format: XXXX-XXXX-XXXX-XXXX)
3. Paste into your authenticator app

Security Recommendations

• Save backup codes — without them, you’ll lose account access
• Use a password manager — to store backup codes securely
• Never share codes — never send codes to anyone
• Regularly check sessions — revoke unknown devices
• Enable 2FA everywhere — email, social media, hosting

Next Steps

• Billing & Payments — Manage your credit
• Support — Contact for issues
• Platform Overview — Getting started with CoreSynth

Need help? Open a support ticket  or ask Alex.