Skip to content
EN

Two-factor verification (2FA)

Two-factor verification is extra protection for your account: once turned on, signing in and sensitive operations (e.g. changing KSeF access details) require — besides the password — a code from a second factor.

Method Description
Authenticator app (TOTP) Google Authenticator, Microsoft Authenticator, Authy, and similar — a 6-digit code that changes every 30 seconds. Recommended as the primary method.
Email code A one-time code sent to the account’s email address. A backup factor with a lower security class, since it uses the same channel as password recovery.
Backup codes A set of one-time codes generated when 2FA is turned on, for use when the primary method is unavailable (e.g. a lost phone).
  1. Open Settings → General → Two-factor verification.
  2. Choose a method: an authenticator app or an email code.
  3. For an authenticator app — scan the QR code or enter the key by hand, then confirm with the 6-digit code from the app.
  4. Save the backup codes shown. They’re visible only at this moment — Atestio doesn’t store them in a form that can be shown again.

Two-factor verification (2FA) panel in Settings with buttons to add an authenticator app or an email code

Each backup code works once. Once they’re used up, the 2FA panel offers the option to generate a new set — the previous one then becomes invalid.

Turning it off requires confirming with the current password or an active factor.