# Two Factor Authentication

Gallabox has introduced a nifty feature that adds an extra layer of security to your Account. It is a cool way to make sure that only the right folks get access to your Gallabox account. Let's dive into how you can use it and why it's a good idea.

### **Gallabox Two-Step Verification**

Enabling 2FA is like having a secret code (a six-digit PIN, to be precise) that you need to login. Now, whenever someone tries signing on Gallabox Account, they need not only the password but also this special PIN. 

{% hint style="info" %}
You can enable 2FA using two methods:

* [Time-based One-time Password Authentication](#totp-authentication)
* [Email Authentication](#enabling-the-mail-authentication)
  {% endhint %}

### **Enabling the Mail  Authentication**

To enable the Mail Authentication for your Account:

1. When you login to your account, you will be asked to Enable the **two-factor authentication**. The other way is to go to Profile from your Gallabox Dashboard and click on "**Enable two-factor authentication**".  A pop-up will appear, asking you the OTP that will be shared on your registered email address. 

<figure><img src="/files/kn30rsRNcvjUgclKqeMl" alt=""><figcaption></figcaption></figure>

2. Enter your Password and click on Enable button, a OTP will be sent to your registered email id.

<figure><img src="/files/MTAHZZd41IaJfDjAhlW0" alt=""><figcaption></figcaption></figure>

Once you enter the OTP and click on Verify button, the email authentication will be enabled for your account. Now, whenever you will login to the Gallabox Account, you will be asked to verify the account using the OTP.

### Haven't received OTP?

Please ensure you have done the following:

1. **Check your email:** The email will be in your Inbox or Spam folder. If you have a rule that moves Gallabox emails to a specific folder, you will find the OTP email there.
2. **Search for the subject line:** "Verify your Gallabox Account with OTP"
3. **Resend the OTP:** If you don't receive the OTP email from Gallabox initially, try resending it and check the above-mentioned folders again.
4. **Contact support:** If the problem persists, contact our support team for assistance at <support@gallabox.com>.

### TOTP Authentication

TOTP (Time-based One-Time Password) is a temporary code generated by an algorithm using the current time. It is often used for two-factor authentication and is valid for only a short period, usually 30 seconds.

{% hint style="success" %}
This option is recommended if you are facing difficulties in receiving the OTP via email.&#x20;
{% endhint %}

To enable the TOTP Authentication for your Account:

1. Navigate to your Gallabox account and go to the Profile section. Under Passwords and Two-Factor Authentication, you will find the TOTP authentication option.

<figure><img src="/files/ekebjiRJan4tjBscXo8K" alt=""><figcaption></figcaption></figure>

2. To enable TOTP authentication: Click 'Enable' next to TOTP authentication. Enter your account password to confirm your identity. Click 'Verify'.

<figure><img src="/files/5xucct6geIlNXQtLt6rX" alt=""><figcaption></figcaption></figure>

3. Scan the QR code to get the OTP. Use any of these apps to generate the code: Authy, Google Authenticator, Microsoft Authenticator, or Zoho Authenticator.

<figure><img src="/files/eKBiTMYKDrhBdMdwaN97" alt=""><figcaption></figcaption></figure>

4. Enter the code in the provided field and click 'Verify'. You will then receive a list of Recovery codes. Save or download them to use them in case you don't receive the 2FA code.

<figure><img src="/files/f16ETmHfrt8x1DkFZ22G" alt=""><figcaption></figcaption></figure>

This will enable TOTP for your account.

{% hint style="info" %}
Once TOTP is enabled, you will have to verify your account using TOTP only. You will no longer receive OTP emails.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.gallabox.com/account-security-features/two-factor-authentication.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.