> For the complete documentation index, see [llms.txt](https://docs.finpay.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.finpay.id/documentation/security/2fa-authentication.md).

# 2FA Authentication

Protect your dashboard access with two-factor authentication.

Finpay supports Google Authenticator-based 2FA for merchant users. After you enable it, users must enter both their password and a time-based verification code when they sign in.

{% hint style="info" %}
Use 2FA for all users with dashboard access. This is especially important for administrator, finance, and approval roles.
{% endhint %}

### Enable 2FA

{% stepper %}
{% step %}

### Sign in

Sign in to the Finpay Dashboard with your user account.
{% endstep %}

{% step %}

### Open your profile settings

Go to **Settings → User Profile**.
{% endstep %}

{% step %}

### Start 2FA setup

Click **Activate Google Two-factor Authentication**.
{% endstep %}

{% step %}

### Pair your authenticator app

Open Google Authenticator on your mobile device.

Scan the QR code shown on the screen.
{% endstep %}

{% step %}

### Verify activation

Enter the verification code from Google Authenticator.

Click **Send OTP** to confirm activation.
{% endstep %}
{% endstepper %}

After setup is complete, 2FA is active for your account.

### What users need

Each user needs:

* An active Finpay dashboard account
* Access to their registered sign-in credentials
* Google Authenticator installed on a mobile device

### Recommended security practices

* Require 2FA for all internal dashboard users.
* Review 2FA use during onboarding and offboarding.
* Restrict administrator access to trusted personnel only.
* Combine 2FA with [IP Whitelist](/documentation/security/ip-whitelist.md) for stronger dashboard protection.

### Troubleshooting

If a user cannot complete setup:

* Confirm the mobile device can open Google Authenticator
* Rescan the QR code and use the latest generated code
* Make sure the verification code is entered before it expires

If the issue continues, ask your internal administrator to review the user account and retry the setup process.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.finpay.id/documentation/security/2fa-authentication.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.