Securing access to the platform hundreds of thousands of app owners use to track their private data is important to us, which is why Appfigures offers two-factor authentication (2FA) to all members across all plans, including the free plan.

What's Two-Factor Authentication (2FA)?

Traditionally, when logging into your account you'll need to enter your email and password. Those were secure in the past but these days brute force attacks and password leaks are commonplace.

2FA helps secure your account, even if your password is compromised, by requiring another temporary time-based code from an authenticator app on your mobile device.

2FA is becoming an industry-standard, especially for services that store sensitive information like Appfigures.

FYI - 2FA is a new, optional, security feature available in your Appfigures account. It isn't a requirement and can be turned on and off on-demand.

Enabling 2FA in Appfigures

1. Go to Manage > Security
2. Under Two-Factor Authentication click Enable.
3. If you have not verified your email address before, you'll be sent a code, via email, to enter.
4. If prompted, enter your Appfigures password or skip to step #5.
5. Open your authenticator app and scan the QR code (or click can't scan QR code? for manual set up within your authenticator app).
6. Enter the code from the authenticator app into the text box in Appfigures and hit next.
7. Save and download recovery codes for safe keeping. Important: in the event that you lose access to your authenticator app these codes will be the only way to gain recover your account.
8. Once saved, hit I saved these codes

You're now all set! You can manage these details through your Security section at any time.

2FA protects not just your login but also other sensitive parts of your account for even tighter protection. Once enabled, you'll need to provide a 2FA code when logging in and also when:

• Updating your email address
• Changing your password
• Adding, updating, and removing API keys
• Adding, removing, and updating users

Frequently Asked Questions

I Can't Find the Security Section in My Account

This means you're using the older Appfigures look. Enabling 2FA requires switching to the new look (but you can switch back after)

To enable the new look, go to your Profile and check the box next to New Look.

Once the new look is loaded you'll find the security option from the main menu on the left.

Can I still Use the API?

Yes. When you switch to 2FA, you will be required to use a personal access token as opposed to basic authentication with the API.

-> How to Generate a Personal Access Token

How Do I Verify My Email?

Verify your email address through your Profile.

1. Click the 'Verify' link under your email address.
2. You'll receive a code to your email address.
3. When you have the code from your email, enter the code into the existing prompt.

Can I Disable 2FA?

Yes, 2FA can be disabled through the Security section when hitting the disable button under Two-Factor Authentication. You'll be forced through the verification flow one more time when making this decision.

Have any other questions? Contact us directly →