Help centre / Settings & Admin

Two-factor sign-in (MFA)

Protect your account with an authenticator app, backup codes and what to do if a phone is lost.

Two-factor authentication adds a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy…) to your password. We recommend it for every admin.

Turn it on

1. Settings → MFA (your own account).
2. Scan the QR code with your app and enter the code it shows to confirm.
3. Save the backup codes somewhere safe — each one signs you in once if you can't reach your app.

Signing in

After your password, Fixlr asks for the code. A wrong code five times in a row pauses MFA sign-in for that account for 15 minutes.

Lost phone

Use a backup code, then disable and re-enable MFA with the new device. A super admin can't read your secret — it's stored encrypted — so if you have neither phone nor codes, ask a super admin to reset MFA on your user from Settings → Users.

Note: Enabling or disabling MFA is written to the audit log.

Related: Users & invites · User permissions