2 factor authentication (2FA) is an additional layer of security when you log into Formspree. With 2FA, after providing your email and password, you need to provide another form of authentication that only you have access to.
Formspree only supports a code generated by an application on your mobile device or computer. In keeping with the latest security standards, Formspree does not support SMS authentication due to the possibility of simjacking.
After you enable 2FA, your application will generate a one-time passcode that you will use to sign into your Formspree account. Someone will only be able to sign into your account if they know your password and have access to your mobile phone.
We strongly urge you to enable 2FA on Formspree for the safety of your account.
Setting up 2 factor authentication
To set up 2 factor authentication, visit your account settings. If you have not set up 2 factor authentication, you will see the option to set up 2 factor authentication.
Make sure to save your backup codes in a safe place. If you lose these codes, it is a lengthy process to restore account access.
Retrieving backup codes
In the event that you lose your primary device, you can use a backup code to log in to your account. Once 2 factor authentication is set up, you can visit your account settings to retrieve backup codes. Each code is only valid for one use, so you should mark when you have used it. You can always see which codes have been used on the Formspree dashboard.
Please note that if you lose these codes, our support team will need to verify other information to restore access to your account.
Troubleshooting
I've lost my phone or computer that generated codes
If you lost your device that would generate 2 factor codes, you will need to use one of your backup codes. Once you log in, we suggest disabling 2 factor authentication and setting it up again.
My 2FA code is not working
Codes are generated based on the current time. Your 2FA device's time is off from the official time, so we suggest turning on "automatic" time in your device's settings. You can visit time.gov to verify your device's clock.
I've used up all my backup codes
In order to generate a new set of backup codes, you must disable 2 factor authentication and go through the setup process again.
I'm receiving an error that I've already used my code
If your code has already been used, please wait 30 seconds for a new code to be generated. In order to prevent a replay attack, we only allow a 2 factor authentication code to be used once.