Skip to content

Two-factor authentication

Updated October 19, 2026

With two-factor authentication on, signing in to Statsdot takes your password (or your Google account) and a six-digit code from an authenticator app such as Google Authenticator, 1Password, Bitwarden or Authy. Someone who learns your password still cannot get in.

Turn it on

  1. Open your Profile and find Two-factor authentication.
  2. Choose Set up two-factor authentication and scan the QR code with your app, or type the key it shows.
  3. Enter the code your app shows and choose Turn on.
  4. Save the eight recovery codes somewhere safe, such as your password manager. Each one signs you in once if you lose your phone. They are shown only this time.

Signing in

After your password or Google, Statsdot asks for the current code. It applies to the dashboard and the admin area alike. A code works once, and after several wrong codes you have to wait before trying again.

API and MCP access tokens are not affected: they are created from a session that already passed the check, and you can revoke them on the API and MCP page.

Recovery codes and turning it off

  • New recovery codes: on your profile, with a current code from your app. The old ones stop working.
  • Turn off: on your profile, with a current code or a recovery code.
  • Lost your phone and your codes? Write to us from the email address of your account; after checking that it is you, we can turn it off.