AgenCMS

Security and two-factor authentication

This page shows you how to keep your account safe: update your password and turn on two-factor authentication (2FA) using an authenticator app.

You manage both from Settings > Security at /settings/security.

Change your password

  1. Go to Settings > Security.
  2. Under Update password, enter your Current password.
  3. Enter your New password, then retype it in Confirm password.
  4. Click Save password. You will see a Saved confirmation when it works.

A few things to know:

  • Use a long, random password. A password manager makes this easy.
  • If your current password is wrong, or the two new password fields do not match, you will see an error and the fields will reset.
  • For your protection, password changes are rate-limited, so avoid rapid repeated attempts.

Turn on two-factor authentication

Two-factor authentication adds a one-time pin to your login. After you enter your password, you will also be asked for a 6-digit code from an authenticator app on your phone (any TOTP-supported app works).

The two-factor section appears under Two-factor authentication on the Security page. If you do not see it, your account may not have 2FA management available.

To enable it:

  1. On the Security page, find Two-factor authentication and click Enable 2FA.
  2. A setup window opens with a QR code. Open your authenticator app and scan the QR code.
    • Prefer to type it in? Use or, enter the code manually and copy the setup key into your app.
  3. Click Continue.
  4. If asked to verify, enter the 6-digit code shown in your authenticator app, then click Confirm.
  5. When setup finishes, two-factor authentication is active. From now on, you will be prompted for a pin each time you log in.

Save your recovery codes

After 2FA is on, a 2FA recovery codes card appears. Recovery codes let you get back into your account if you lose your phone.

  1. Click View recovery codes to reveal them.
  2. Copy the codes and store them somewhere safe, such as a password manager.
  3. Each code works only once and is removed after use.

If you run low or think your codes have been exposed, click Regenerate codes to replace them with a fresh set. Old codes stop working once you regenerate.

Turn off two-factor authentication

  1. Go to Settings > Security.
  2. Under Two-factor authentication, click Disable 2FA.

Your account will no longer ask for a pin at login. Your old recovery codes are cleared. You can re-enable 2FA at any time, which generates a new QR code and a new set of recovery codes.

Tips for staying secure

  • Keep 2FA on. It is the single best protection against someone guessing your password.
  • Never share your recovery codes or authenticator app.
  • Review where you are signed in from time to time on the Active sessions page, and sign out of devices you do not recognize.