Two-factor sign-in
Turn on two-factor sign-in with an authenticator app, keep recovery codes, require it for everyone in your organization, and manage signed-in sessions.
TraceX can read your production systems, so a stolen password shouldn’t be enough to get in. Two-factor sign-in asks for a code from your phone as well as your password.
Turn it on for yourself
Section titled “Turn it on for yourself”- Open Profile → Two-factor sign-in.
- Scan the QR code with an authenticator app (1Password, Google Authenticator, Authy and so on).
- Enter the 6-digit code it shows.
- Save your recovery codes somewhere safe, such as a password manager. Each works once if you lose your phone.
After a correct code you can trust the browser for a while. Changing your password, or turning two-factor off and on again, makes every trusted browser ask again.
Require it for everyone
Section titled “Require it for everyone”Admins can turn on Security → Require two-factor sign-in. Members without it are asked to set it up before they can continue (TX-1004).
If your organization uses SSO only, your identity provider handles two-factor instead.
Lost your phone?
Section titled “Lost your phone?”Sign in with a recovery code in place of the 6-digit code, then set up two-factor again on your new phone.
Running low on recovery codes? Make a new set under Profile → Two-factor sign-in while you’re signed in; the old ones stop working. Locked out with none left? Email [email protected] from your account’s address.
Sessions
Section titled “Sessions”Profile → Sessions lists every device signed in, including CLI and AI-tool tokens. Sign out any you don’t recognise. Changing your password signs out every device.