Skip to content
TopLeft
Menu
Browse the docs

Secure Your Account with 2FA Authenticator

TopLeft supports two-factor authentication (2FA) to reduce the risk your account is compromised by unauthorized users. It uses Time-Based One Time Passwords (TOTP).

2FA Apps

We recommend:

Enable Two-Factor Authentication

To enable 2FA for your account, follow these steps.

  1. In the main menu click your name, then click Account.
  2. Click the "Two-Factor Authentication" button to browse to the 2FA configuration page.
  3. Click "Enable Two-Factor Authentication".
  4. Proceed through the setup wizard. You will scan the QR code to your device and provide the 2FA code to finalize the setup.

Save Backup Tokens

Backup tokens can be used when your one-time password application isn't available, such as if your phone is lost or replaced. Each token can be used only once.

You can generate tokens from the 2FA management options with these steps:

  1. Navigate to the 2FA management page.
  2. Click "Show Codes"
  3. Click "Generate Tokens"
  4. Print these tokens and keep them somewhere safe.

Disable Two-Factor Authentication

To disable 2FA from your account, follow these steps.

  1. In the main menu click your name, then click Account.
  2. Click the "Two-Factor Authentication" button to browse to the 2FA configuration page.
  3. Click the "Disable Two-Factor Authentication" button.
  4. Click the checkbox to confirm that you are disabling 2FA for your account, then click Disable.

I Lost My 2FA Device or Authenticator

Sorry to hear that. Use your backup tokens to log in, then remove 2FA and re-enable it.

If you didn't save backup tokens, ask your TopLeft administrator to remove your 2FA by following the steps in this article. Then you can log in and re-enable 2FA, saving backup tokens this time. 😉

Updated September 23, 2026

Comments

    The first time, we email you a link to confirm. After that, this browser remembers you.

    Like

    We email you a link once. After you click it, this browser remembers you on every docs page.

    Feedback on this page

    Fix or keep
    What kind

    Tip: select words on the page before you open this, and they come with your note.

    Optional, up to 5. Paste into the box above, or drop them here.

      They go into the GitLab issue. Crop out anything private.

      See every note and what happened to it