Skip to content

Two-factor authentication

Two-factor authentication (2FA) adds a second layer of security beyond your password. This article covers what’s available and how to enable it.

Current 2FA support

The Smile Channel currently supports email-based 2FA — when enabled, logging in from a new device requires both your password AND a 6-digit code sent to your email. App-based 2FA (Google Authenticator, Authy) is on the roadmap but not yet available.

How to enable email 2FA

  1. Dashboard → Settings → Security
  2. Toggle “Email 2FA” on
  3. Confirm with your current password
  4. Save

From the next login forward, you’ll receive a code by email when logging in from an unrecognized device.

What “unrecognized device” means

The system uses a combination of cookies and IP / browser fingerprinting to recognize trusted devices. If you log in from your usual laptop, you typically don’t see the 2FA prompt every time. New devices, incognito windows, or significantly different IPs trigger the second factor.

i
Why email and not app?

Email 2FA isn’t as secure as app-based codes (your email could be compromised), but it’s significantly better than password-only. App-based is on the roadmap.

Disabling 2FA

Same path — Settings → Security → toggle off. We’ll require your password to confirm the change.

Recovering when locked out

If you lose access to your email AND need to log in:

  1. Click “Need help signing in?” on the login page
  2. Submit the recovery form with as much account info as you can provide
  3. Support will verify your identity manually and reset 2FA

This takes 1-3 business days. The waiting period is intentional — instant recovery would defeat the purpose of 2FA.