> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.chrisp.chat/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# How to enable Two Factor Authentication?

****You can add an extra layer of security to your Crisp account by setting up two-factor authentication. Here's how to enable 2FA in Crisp.****

| In this example we are using [Google Authenticator](https://support.google.com/accounts/answer/1066447), but many apps are able to generate 2FA codes

## What is two-factor authentication 🔒

Multi-factor authentication (MFA; encompassing authentication, or 2FA, along with similar terms) is an electronic authentication method in which a user is granted access an account or application only after successfully presenting two or more pieces of evidence (or factors) to an authentication mechanism.

Enabling two factor authentication with Crisp is optional but is strongly recommended. This way, if someone steals your password you will be protected by this extra layer of protection.

Crisp relies on the Google Authenticator protocol. This protocol is widely used and multiple apps are supported:

* [Google Authenticator](https://support.google.com/accounts/answer/1066447)
* [Microsoft Authenticator](https://www.microsoft.com/security/mobile-authenticator-app)
* [YubiKey](https://www.yubico.com/)
* LastPass
* 1Password

|| Additionally, Crisp can send 2FA requests to your phone number using SMS. However, this channel is heavily rate limited, and you can only do a certain number of SMS requests for security reasons.

## Enabling Two Factor Authentication with Crisp

There are two ways enabling Two Factor Authentication with Crisp:

1. Your company enforces 2FA and Crisp shows a QRCode during the signup process
2. You already have an account. In this case, you can opt-in for 2FA from [Settings](https://app.crisp.chat/settings/account/information/) ****→**** [Account](https://app.crisp.chat/settings/account/information/) ****→**** [Account Information](https://app.crisp.chat/settings/account/information/), by clicking ****Enable Two Factor Authentication****. Note that you need to add your mobile phone number to your Crisp Settings first.

## Example how to use Two Factor Using Google Authenticator

1. Download the [Google Authenticator](https://support.google.com/accounts/answer/1066447) on your iPhone or Android phone.
2. Click ****Scan a QRCode****
3. Scan the code

![Scanning the code](https://storage.crisp.chat/users/helpdesk/website/-/3/6/2/2/3622762c0172da00/0024e713-5038-4ae6-8f9f-1f3518_1ty5az9.png)

## Login with Two Factor Authentication

Once Two Factor Authentication is enabled for your account, Crisp will require you to provide a 2FA code everytime you login. ****You will have to open the Authenticator App on your phone. It will provide a 6 digits code that is rotated every 30 seconds.****

![Example of a 2FA code generated by Google Authenticator](https://storage.crisp.chat/users/helpdesk/website/-/9/7/7/2/97729cb8d208b000/2d004111-90c4-4ab6-8c5e-bc358c_ukhkda.png)

## Changing your 2FA app

If your workspace requires 2FA and you want to switch to a different authenticator app, you can do it in this order:

1. Turn off the workspace setting that forces operators to have 2FA enabled
2. Remove 2FA from your account
3. Set up 2FA again with your new authenticator app
4. Turn the workspace setting back on

## Enforcing Two Factor Authentication for my site 🔐

By default, Crisp is not enforcing Two Factor Authentication. If you'd like to enforce Two Factor Authentication for your Crisp site, it is possible. Here is the procedure:

1. Make sure that all existing agents in your Crisp team opted-in for 2FA. You can send them this article via email or Slack for reference. They can also contact us on [crisp.chat](https://crisp.chat) if they need help.

![All your agents should have a green padlock icon next to their email](https://storage.crisp.chat/users/helpdesk/website/-/1/c/3/3/1c33c23b84e2d800/12dc2d1f-670d-47ab-9b05-2357ea_1wxs4z2.png)

2. Enable Two Factor Authentication by going to :

* Go to the [Crisp app](https://app.crisp.chat)
* Navigate to ****Settings → Workspace Settings → Operators in the Team****
* Enable `` `Force Operators to have their Two Factor Authentication Enabled` ``

![Force Operators to have their Two Factor Authentication Enabled](https://storage.crisp.chat/users/helpdesk/website/-/3/b/4/7/3b47b6971fd73800/53a42a08-16eb-45ae-9806-b7731d_1ozqxla.png)

### Regaining Access if Two-Factor Authentication 🔓

If you are unable to log in because two-factor authentication (2FA) is enabled on your account you can first try to login without the alternate two factor method (SMS).

If you cannot receive the SMS, we will need to verify your identity:

* Send a photo of your ID showing your first and last name from your registered email address to the support agent.

Once your identity is confirmed, the support team may disable 2FA on your account and send you a password reset email so you can regain access.