Two factor, also known as multi-factor authentication (2FA/MFA), require you to provide two or more factors to identify yourself when logging in, such as something you know, like a password or PIN, and something you have, such as your phone which is running a timed cryptographic key generator that generates a one-time password (OTP), which is usually in the form of a 6 digit number that expires every 30 seconds. Each time you log in at a new device, you will be prompted for a new code. MFA is no substitute for a weak password!

What you need to know:
Adding two factor authentication will require you to enter a code from your phone whenever you log in from a new device. Currently, you will need a smart phone to enable two-factor authentication running an authenticator, such as Google Authenticator or Red Hat's FreeOTP Authenticator (recommended: Android/ IOS ). We recommend FreeOTP as it does not rely on third-party QR scanners. Auth apps that synchronize codes are by definition less secure than ones that have codes wipe. Just open the app and use the built-in scanner on the displayed QR code.

Tip: print this page (and QR code) and save somewhere safe. You should also save the backup code, which will let you in if you damage or lose your phone.