Two-factor authentication (2FA)

2FA means an attacker with your password still cannot log in.

Enable it

1. Client area → Account → Security.
2. Enable Two-Factor Authentication.
3. Scan the QR code with Google Authenticator, Authy or 1Password.
4. Enter the 6-digit code to confirm.
5. Save the recovery/backup codes somewhere offline.

Logging in

After your password, enter the current 6-digit code.

If you lose your phone

Use a saved recovery code. If you have none, open a ticket from your registered email — expect identity verification before we disable 2FA.

Best practice

• Use 2FA on your email too. Email is the reset path for everything else.
• Use a password manager; never reuse the VexaNode password.
• Review Account → Security → Active Sessions and log out unknown devices.