Two-Factor Authentication

Two-Factor Authentication (2FA) adds an extra layer of protection to your Linkkit account by requiring a second verification step during login.

Instead of relying solely on your password, 2FA requires a second confirmation — typically a code from an authenticator app — helping prevent unauthorised access even if your password is compromised.

This page explains how 2FA works, why it matters, how to enable it, and best practices to keep your account secure.

What Is Two-Factor Authentication?

Two-Factor Authentication is a security method that combines:

1. Something you know (your password)

2. Something you have (a code generated on your phone or device)

With 2FA enabled, signing in requires both elements — making unauthorised access significantly more difficult.

Unlike password-only logins, 2FA protects against:

• Keyloggers

• Password breaches

• Shared or reused passwords

• Automated hacking attempts

How 2FA Works in Linkkit

When 2FA is enabled:

1. You enter your email and password as usual

2. You are prompted for a verification code

3. Open your authenticator app to retrieve the code

4. Enter the code to complete sign-in

Verification codes typically refresh every 30 seconds, ensuring secure, time-based access.

Supported Authentication Methods

Linkkit supports standard Time-Based One-Time Password (TOTP) authenticators, such as:

• Google Authenticator

• Authy

• Microsoft Authenticator

• 1Password / other secure TOTP apps

These apps generate unique, short-lived codes linked to your account.

How to Enable Two-Factor Authentication

Two-factor authentication is currently rolling out and may be labeled “Coming Soon” in your dashboard. Once enabled, follow the steps below.

1. Go to Your Security Settings

1. Open your Linkkit dashboard

2. Navigate to Settings → Security

3. Locate the Two-Factor Authentication panel

2. Click Enable 2FA

Click the Enable 2FA toggle or button to start the setup wizard.

3. Scan the QR Code with Your Authenticator App

Linkkit will display a QR code.

1. Open your authenticator app

2. Scan the code

3. The app will generate a 6-digit verification code

This links your account to the authenticator.

4. Enter the Verification Code

Type the 6-digit code from your authenticator app into the Linkkit prompt.

If the code matches, 2FA is successfully activated.

5. Save Backup Codes

Linkkit will provide backup codes — store these securely.

Backup codes let you sign in even if you lose access to your authenticator app.

How 2FA Works on Sign-In

Once 2FA is enabled:

• After entering your email and password, you’ll be prompted for a 6-digit code

• Open your authenticator app to retrieve the current code

• Enter the code to complete the login

If you enter an incorrect code, you’ll be prompted to try again.

Backup Codes — What They Are and Why They Matter

When you enable 2FA, Linkkit provides backup codes:

• One-time use codes

• Stored offline

• Used if you lose access to your authenticator app

How to Use Backup Codes

If your device is lost or your authenticator app is unavailable:

1. Attempt login as normal

2. When prompted for a verification code, select Use backup code

3. Enter one of the backup codes you saved

Each backup code can be used only once.

Security Best Practices

To keep your 2FA setup secure:

Use a trusted authenticator app (not SMS)
Store backup codes in a secure place
Do NOT share your verification codes
Update your device or app regularly
Remove old or unused devices from your account