Setting up an authenticator app for two-factor authentication

Why 2FA matters most

Passwords leak — through phishing, reuse and data breaches. Two-factor authentication (2FA) means that even if a criminal has your password, they still cannot sign in without the second factor: a code that lives only on your phone and changes every thirty seconds. Industry data consistently shows that app-based 2FA blocks the overwhelming majority of automated account-takeover attempts. If you do one thing on this page, do this.

What you need

A free authenticator app on your phone. Any app that follows the TOTP standard works — Google Authenticator, Microsoft Authenticator, or the authenticator built into many password managers. You do not need a specific brand, and you can move your codes to a new phone later.

The setup steps

1. Sign in to your Credit Corp account and open Security settings.
2. Choose Add two-factor authentication and select the authenticator-app option.
3. A QR code appears. Open your authenticator app, tap add account and scan it.
4. The app shows a six-digit code. Type that code back into Credit Corp to confirm the link.
5. Save the recovery codes shown on screen somewhere safe — they let you back in if you lose your phone.

From now on, each sign-in asks for the current six-digit code after your password.

Keep your recovery codes

If you lose or replace your phone without your codes, you can be locked out. Store the recovery codes in your password manager or print them and keep them with your important company documents — not in the same place as your phone. If you ever do get stuck, follow account recovery.