> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://corebycarlo.crisp.help/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Secure your account with two-step verification (2FA)

Two-step verification adds a 6-digit email code to every login. Even if your password is compromised, no one reaches your dashboard without access to your inbox.

The setting is per user. Each person on your account activates or deactivates it for their own login, and your choice has no effect on your colleagues.
# Where to find the setting

* Click **your account name in the top right corner** of the dashboard,
* then select **Security**.
* The Security page holds two things: your password, and two-step verification.

### Turn on two-step verification

1. Go to **Security** from the top right menu.
2. Scroll to the **Two-step verification (email)** block.
3. Click the toggle on the right.
4. A code is sent to the email address linked to your account. Enter the 6 digits, then click **Confirm**. If nothing arrives, click **Resend code**.
5. The status switches to **Enabled**, with the message "A code is required by email at each login."From now on, each login asks for your email and password, then for a code sent to your inbox.

### Turn off two-step verification
Deactivation is protected the same way as activation, so a code is required here too.
1. Go to **Security** from the top right menu.
2. Click the toggle in the **Two-step verification (email)** block.
3. Enter the 6-digit code sent to your email address, then confirm.
4. The status returns to **Disabled**, and you sign in with email and password only.
We recommend keeping it on, especially if your user can create payment links or export transactions.

### Check your spam and promotions folders.You did not receive the code

* Click **Resend code** in the confirmation window.
* Check the email address linked to your account under **My account** in the top right menu. The code goes there, not to another address.
* Still nothing after a few minutes, contact support from the **Help** entry in the left menu.

### Also on this page

The Security page is also where you change your password. Minimum 8 characters, with an uppercase letter, a lowercase letter, a digit and a special character.