Setting up two-factor authentication

What is two-factor authentication?

Two-factor authentication (2FA) adds a second verification step to your login. Even if someone knows your password, they cannot log in without the 6-digit one-time code from your authenticator app. This protects your account from phishing and credential-stuffing attacks.

Dapplon uses Time-based One-Time Passwords (TOTP), compatible with Google Authenticator, Microsoft Authenticator, and Authy.

Setting up 2FA — first time

1. Log in to your Dapplon panel
2. Click your avatar in the top-right corner
3. Go to Account Settings > Security
4. Click Enable Two-Factor Authentication
5. Open Google Authenticator (or any TOTP app) on your phone
6. Tap the + button in the app and choose Scan QR Code
7. Point your phone camera at the QR code shown on the Dapplon screen
8. The app adds a new entry named "Dapplon" and shows a 6-digit code
9. Enter that 6-digit code in the confirmation field on the Dapplon screen
10. Click Verify and Enable
11. Dapplon shows you 8 backup recovery codes — save these somewhere safe (printed or in a password manager)

Logging in with 2FA enabled

1. Enter your email and password as usual
2. Click Sign In
3. You are taken to a screen asking for your 6-digit code
4. Open your authenticator app and find the Dapplon entry
5. Enter the current 6-digit code — it refreshes every 30 seconds
6. Click Verify

If you lose access to your authenticator app

If your phone is lost or the authenticator app is deleted:

1. Use one of your saved backup recovery codes on the 2FA verification screen
2. Once logged in, go to Account Settings > Security and disable 2FA
3. Re-enable it with your new device

If you have no backup codes either, contact your Dapplon admin or email [email protected]. An admin can disable 2FA from the SuperAdmin panel after identity verification.