Help Screens Account & security
Turn on two-factor ACC-05
Enroll an authenticator app (TOTP) and save recovery codes.
| Who can use it | Self |
|---|---|
| Where it is | /account/security/2fa/enable · link: https://hub.substratalapps.com/account/security/2fa/enable or substratal://account/security/2fa/enable |
| Available on | Web (PWA), iOS / iPadOS, Android, Windows, Linux (GNOME), macOS |
| Phase | MVP |
What you can do here
- Start — 409 → already enabled; close.
- Confirm — 200 → step 3. 401 → wrong code.
Related guides
- Signing in and keeping your account secure — Sign in, two-factor authentication, sessions and signing out everywhere.
- Your first hour as an administrator — Secure your account, find your way around Manage, and make a narrower role for your support team.
- Set up the Windows app as an administrator — From a fresh install to a secured, signed-in admin workstation, with the shortcuts that make daily work fast.
On your platform
| App | Status | How it's built |
|---|---|---|
| Web (PWA) | — | Dialog/sheet with step indicator; each step a URL hash |
| iOS / iPadOS | — | Sheet with NavigationStack push per step |
| Android | Planned | Full-screen dialog with steps |
| Windows | — | ContentDialog steps or page with BreadcrumbBar |
| Linux (GNOME) | — | AdwDialog with AdwNavigationView pages |
| macOS | — | Sheet with paged steps + Back/Continue |
Status is reported by each app's repository; — means that app doesn't report it yet.
For developers: API calls
| Method | Path | What it does |
|---|---|---|
| POST | /users/{id}/mfa/totp | Begin TOTP enrollment (self only) |
| POST | /users/{id}/mfa/totp/confirm | Confirm TOTP enrollment with a first code; returns recovery codes once |
Every call sends Substratal-Version: 1. Paths are at the host root, with no /v1.