> ## Documentation Index
> Fetch the complete documentation index at: https://ahasend.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> AhaSend stores all message data in the EU. See /facts.
> The API base URL is https://api.ahasend.com. Send the API key in the Authorization: Bearer header. See /api-reference/authentication.
> Use send.ahasend.com for SMTP. Ports 25, 587 and 2525 use STARTTLS. Port 465 is not supported. See /smtp.
> For send-only integrations, create an API Key v2 under Credentials → Add and scope it to messages:send:{your-domain}. See /send-api/credentials and /api-reference/scopes.

# Enable Two-Factor Authentication (2FA)

> Turn on TOTP two-factor authentication for your AhaSend login with Google Authenticator, Authy or 1Password, and use recovery codes if you lose your phone.

AhaSend two-factor authentication adds a time-based code to your login; this guide shows how to set it up and keep recovery codes.

Available on Free, Pro and Max. See [plans and features](https://ahasend.com/docs/facts.md#plans-and-features).

> [!NOTE]
>
> **Enhanced Security:** Even if someone obtains your password, they cannot access your account without your physical device and authenticator app.

## Why Enable 2FA?

Your AhaSend account controls critical email infrastructure and sensitive data. 2FA provides essential protection by requiring two forms of authentication:

1. **Something you know** - Your password
2. **Something you have** - Your smartphone with the authenticator app

If you lose both the authenticator and all recovery codes, contact [AhaSend support](mailto:support@ahasend.com) for help with account recovery.

## Setting Up 2FA

**1. Access Security Settings**

**Navigate to your account security options:**

1. **Log in** to your AhaSend dashboard
2. **Go to** your **[Profile](https://dash.ahasend.com/profile)**
3. **Click** "Enable Two-Factor Authentication"

**2. Install Authenticator App**

**Download a TOTP authenticator app on your smartphone:**

**Recommended Apps:**

* **Google Authenticator** (iOS/Android)
* **Microsoft Authenticator** (iOS/Android)
* **Twilio Authy** (iOS/Android)
* **1Password** (with TOTP support)

**3. Link Your Account**

**Connect AhaSend to your authenticator app:**

**Option 1: QR Code (Recommended)**

1. **Open** your authenticator app
2. **Tap** the "+" or "Add Account" button
3. **Select** "Scan QR Code"
4. **Point** your camera at the QR code on screen

**Option 2: Manual Entry**

1. **Choose** "Enter setup key" in your app
2. **Enter** "AhaSend" as the account name
3. **Copy** the secret key from the setup page
4. **Paste** the key into your authenticator app

**4. Verify Setup**

**Confirm your authenticator is working:**

1. **Check** the 6-digit code in your authenticator app
2. **Enter** the current code in the verification field
3. **Click** "Verify" to confirm

> [!TIP]
>
> **Timing:** TOTP codes refresh every 30 seconds. If a code expires, wait for the new one to generate.

**5. Save Recovery Codes**

**Secure your backup codes (Critical Step):**

1. **Copy** all recovery codes displayed
2. **Store** them in a secure password manager or safe location
3. **Do not** store them only on your phone
4. **Confirm** you've saved them to complete setup

> [!WARNING]
>
> **Essential Backup:** Recovery codes are your only way to access your account if you lose your phone. Each code can only be used once.

## Login Process with 2FA Enabled

Once 2FA is active, your login process includes an additional step:

**1. Enter Credentials**

**Standard login:**

* Enter your email address and password
* Click "Sign In"

**2. Provide 2FA Code**

**Enter authenticator code:**

1. **Open** your authenticator app
2. **Find** the current 6-digit code for AhaSend
3. **Enter** the code in the 2FA prompt
4. **Submit** to complete login

## Using Recovery Codes

If you lose access to your authenticator app, you can simply enter the recovery code into the 2FA input prompt instead of a code generated by the authenticator app.

> [!NOTE]
>
> **One-Time Use:** Each recovery code can only be used once. After using a code, it becomes invalid permanently.

## Related Guides

* [Account quickstart](https://ahasend.com/docs/quickstart.md), [Require team 2FA](https://ahasend.com/docs/security/2fa-enforcement.md), [Single sign-on](https://ahasend.com/docs/security/sso.md).
* [Plans and limits](https://ahasend.com/docs/facts.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.