Set up multi-factor authentication

A verified second factor (TOTP) is required for approvals, account changes, and billing requests.

Not connected yet

Live authentication and MFA are not connected in this prototype. Enrollment is illustrative only.

Authenticator app (TOTP)

Scan the QR code with an authenticator app and enter the 6-digit code. This is the recommended second factor.

QR placeholder (not generated in prototype)

Phone/SMS is a documented recovery configuration only. It is not an insecure fallback for approvals and is not implemented in this prototype.