> ## Documentation Index
> Fetch the complete documentation index at: https://docs.roomdoo.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Turn on two-factor authentication (2FA)
> Protect your Roomdoo account with a code from your phone on top of your password: which app to install, how to turn it on and how "Remember this device" works.
With two-factor authentication (2FA), signing in to Roomdoo takes your password plus a 6-digit code generated by an app on your phone, which changes every 30 seconds. If someone gets hold of your password, for example through a phishing email, they won't be able to sign in without that code. Each person turns it on in their own account.
## 1. Install an authenticator app
They're free and any of these will do. If you already use one, there's no need to install another.
| App | iPhone | Android |
| - | - | - |
| **Google Authenticator** | [App Store](https://apps.apple.com/app/google-authenticator/id388497605) | [Google Play](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2) |
| **Microsoft Authenticator** | [App Store](https://apps.apple.com/app/microsoft-authenticator/id983156458) | [Google Play](https://play.google.com/store/apps/details?id=com.azure.authenticator) |
| **Bitwarden Authenticator** | [App Store](https://apps.apple.com/app/bitwarden-authenticator/id6497335175) | [Google Play](https://play.google.com/store/apps/details?id=com.bitwarden.authenticator) |
If your company uses the Bitwarden password manager with a Premium or business account, you can store the code in the same item as your Roomdoo password, with nothing else to install.
## 2. Turn it on in Roomdoo
At the bottom left of the sidebar, click your name. A menu opens with **Settings** and **Logout**: click **Settings**. If you use Roomdoo on your phone, open the side menu first with the ☰ button at the top.
In the **User settings** window, open the **Security and Access** tab. At the bottom, in the **Security** section, you'll find **2-factor authentication**.
Turn on the **2-factor authentication** switch. A three-step wizard opens: type your current password and click **Continue**.
In the app, tap **Add account** (usually a **+**), scan the QR code and click **Continue** in Roomdoo. The account will show up in the app with your Roomdoo address, for example `yourhotel.roomdoo.com`.
If you can't scan it, for example because you're turning it on from the phone itself, expand **Can't scan the code?**, copy the code and paste it into the app using the option to enter a key manually.
Enter the 6 digits the app shows and click **Activate**. You'll see **Two-factor authentication enabled**; click **Got it**. From then on we'll ask for the code every time you sign in.
## 3. Sign in with the code
Sign in with your email and password as usual. Then type the code from the app and click **Login**.
If you tick **Remember this device**, we won't ask for the code in that browser for about 90 days, even if you log out. We'll ask for it again on another computer or browser, in an incognito window or if you clear your cookies.
**On a shared computer, like the one at the front desk, only the last user who ticked the box is remembered.** If several of you use the same computer, each with your own account, expect to be asked for the code almost every time. When your shift ends, log out.
## Common cases
Check that you're looking at the Roomdoo account in the app and that the code didn't change while you typed it. If it still fails, set your phone's date and time to automatic: the codes depend on the time.
After 5 wrong codes, or if more than 5 minutes pass after you typed your password, you'll have to start again with your email and password.
The QR code is valid for 15 minutes, and you get a different one every time you open the wizard. Delete from the app the account you added with the previous QR code and scan the new one.
If you moved your accounts to the new phone with the app's backup, you don't need to do anything. If you can no longer generate the code, email us at **[soporte@roomdoo.com](mailto:soporte@roomdoo.com)** and we'll help you set it up again.
Not from the app: once it's on, the switch stays locked. If you need to turn it off, email us at **[soporte@roomdoo.com](mailto:soporte@roomdoo.com)**.
Nobody at Roomdoo will ever ask for your password or the code from your app, whether by email, phone or chat.
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.
