> ## Documentation Index
> Fetch the complete documentation index at: https://docs.omnifact.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Manage your login credentials, change your password, and set up Two-Factor Authentication.

In the **Authentication** tab of your Account Settings, you can manage how you log into Omnifact. This includes updating your password and adding extra security layers to your account.

<Note>
  If your organization uses Single Sign-On (SSO/SAML) to log into Omnifact, you will not see these password or 2FA setup options. Your identity provider handles your authentication requirements instead.
</Note>

## Changing Your Password

If you log in with an email and password, you can update your password at any time:

1. Navigate to your **Account Settings** and select the **Authentication** tab.
2. In the **Password** section, enter your current password.
3. Enter your new password and confirm it.
4. Click **Update Password** to save your changes.

## Two-Factor Authentication (2FA)

Add an extra layer of security to your Omnifact account with Two-Factor Authentication (2FA). Once enabled, logging in requires both your password and a time-based code from your authenticator app.

<Note>
  **Team Administrators:** To require 2FA for your entire organization, see [Security and Access](/en/platform/team-administration/security-and-access) in Team Settings.
</Note>

Omnifact supports Time-based One-Time Password (TOTP) authentication, which works with standard authenticator apps such as Google Authenticator, Authy, or 1Password.

### Enabling Two-Factor Authentication

To set up 2FA for your account:

<Steps>
  <Step title="Access Account Settings">
    Navigate to your **Account Settings**, select the **Authentication** tab, and locate the **Two-Factor Authentication** section (below the password settings).
  </Step>

  <Step title="Verify Your Identity">
    Enter your password to ensure you are the authorized account owner before proceeding.
  </Step>

  <Step title="Link Your Authenticator App">
    Scan the displayed QR code with your chosen authenticator app. If you are unable to scan the QR code, you can manually enter the provided setup key into your app.
  </Step>

  <Step title="Confirm Setup">
    Enter the 6-digit code generated by your authenticator app to confirm the link.
  </Step>

  <Step title="Save Your Recovery Codes">
    Immediately after confirming, you will be shown a set of one-time-use recovery codes. Copy and securely save these codes before the setup is fully completed.
  </Step>
</Steps>

## Managing Two-Factor Authentication

Once 2FA is enabled, the Two-Factor Authentication section in your settings will update to show:

* **Backup Codes:** View how many recovery codes you have left, with an option to regenerate a fresh set. Generating new codes will immediately invalidate your old set.
* **Disable 2FA:** A toggle to turn off Two-Factor Authentication (only available if your organization's admin has not made 2FA mandatory). To disable 2FA, you must enter your password and a current 6-digit authentication code.

## Using Backup & Recovery Codes

Your backup codes are your only safety net if you lose access to your authenticator app (e.g., if you lose your phone or switch devices without transferring your app). Keep them in a safe place, such as a secure password manager.

* **Logging in with a Backup Code:** If you cannot access your authenticator app, you can choose to log in using one of your backup codes instead of a standard 6-digit code. Each backup code can only be used once.
* **Lost Authenticator AND Backup Codes:** If you lose both your authenticator device and your backup codes, you will not be able to recover your account yourself.

## Logging In with 2FA

Once enabled, your login flow will include an additional step:

1. Enter your email and password as usual.
2. When prompted, open your authenticator app and enter the current 6-digit code.

## Failed Login Protection (Throttling)

To protect accounts from brute-force attacks, Omnifact temporarily blocks further login attempts after repeated failures (whether due to an incorrect password or an incorrect 2FA code).

<CardGroup cols={2}>
  <Card title="Automatic Protection" icon="shield-check">
    This protection applies to all accounts, regardless of whether 2FA is enabled.
  </Card>

  <Card title="Targeted Blocking" icon="location-crosshairs">
    The temporary block is scoped specifically to the affected account and IP address. It will not prevent other users in your organization from logging in.
  </Card>

  <Card title="Resolving a Block" icon="clock">
    The block clears automatically after a short period. If you successfully log in, the block is cleared immediately.
  </Card>

  <Card title="What You Will See" icon="message">
    When blocked, you will see a generic message indicating that authentication is temporarily unavailable, rather than a specific error about the password or 2FA code.
  </Card>
</CardGroup>