Guides/Account

How to Set Up Two-Factor Authentication in Modus

Security covers two things: a second factor on your login (so a password alone isn't enough to sign in), and a recovery email so a forgotten password doesn't mean messaging support to have it reset by hand.

The Security page showing a recovery email field and a two-factor authentication panel with no devices enrolled
  1. 01

    Set a recovery email first

    Under Recovery email, add the address you want password-reset links sent to. Without one on file, a forgotten password means reaching out on WhatsApp to have it reset manually.

    The Security page with the recovery email field and the two-factor authentication panel
  2. 02

    Enroll a device

    Click Add device under Two-factor authentication and scan the QR code with an authenticator app — Google Authenticator, Authy, 1Password, or any other TOTP app works. Enter the 6-digit code it generates to confirm the pairing.

  3. 03

    Save your recovery codes

    After enrolling, you're shown a set of one-time recovery codes — save them somewhere safe. They're what gets you back in if you lose access to every enrolled device.

  4. 04

    Add a second device

    Enroll more than one device (a second phone, a password manager's TOTP) so losing one doesn't lock you out entirely.

  5. 05

    Regenerate codes or remove a device when needed

    Regenerating recovery codes invalidates every existing one, and asks for your password first. Removing a device is immediate — do it as soon as you retire a phone.

Good to know

  • A platform admin can view this page while supporting your account, but enrolling or removing a factor is only ever the owner's own act on their own login — an admin can't do it for you.

  • Losing every enrolled device without saved recovery codes means going through account recovery from scratch — the two minutes it takes to save those codes somewhere safe is worth it.

Questions we get asked

Is two-factor authentication required?

No — it's off by default, shown as an "OFF" badge until you enroll a device. It's there for accounts that want the extra protection, not a mandatory gate.

What happens if I lose my phone and have no recovery codes?

Reach support — without a recovery code or a working device, account recovery has to be handled manually.

Does every team member need their own two-factor setup?

Two-factor here is on the owner's own login. Staff logins (added under Team) are a separate credential and don't share this account's two-factor enrollment.

See this running on your own numbers.

Every guide on this site is the real product — set up your own agent, ad account and WhatsApp number, and every deal it closes traces back to what produced it.