Account Settings
šŸ‘¤
1

Access Security Preferences

Navigate to your Account Dashboard, select Security & Privacy from the left sidebar, and locate the Two-Factor Authentication section.

2

Choose Your Authentication Method

We recommend using a TOTP authenticator app (Authy, Google Authenticator, or Microsoft Authenticator) for maximum security. SMS verification is available as a fallback option.

3

Scan or Enter Secret Key

Open your authenticator app and scan the QR code displayed on the next screen. If scanning isn't possible, manually enter the secret key below:

J4KS 8K9L 2MNP 4QRS
4

Verify & Activate

Enter the 6-digit code generated by your authenticator app to complete the setup. You will be prompted to save your backup codes immediately after verification.

Ready to Verify?

Enter the 6-digit code from your authenticator app to activate 2FA.

Don't have access to your authenticator? Switch method

šŸ” Backup Recovery Codes

These single-use codes allow you to access your account if you lose your primary device. Store them securely offline. They cannot be recovered once used.

8821-9453
7734-2019
4412-8890
6655-1132
3390-5547
1128-7764

⚔ Security Best Practices

ā“ Frequently Asked Questions

What happens if I lose my authenticator device?
Use one of your backup recovery codes to log in. Once inside, navigate to Security Settings to disable 2FA and set up a new authenticator device. If all codes are lost, contact our security team with verified identity documentation.
Does Aevum News store my 2FA secret key?
No. We never store or transmit your secret key or generated codes. All verification happens locally on your device or through encrypted, ephemeral server validation.
Can I use hardware keys like YubiKey?
Yes. Aevum News supports FIDO2/WebAuthn hardware security keys. Navigate to Security > Advanced Methods to register a hardware key after initial 2FA setup.
How do I temporarily pause 2FA for a trusted device?
During login, check the "Trust this device for 30 days" option. This stores a secure token on your browser and skips 2FA for that period. Tokens are automatically cleared if you change passwords.