# Two-factor authentication

Two-factor authentication (2FA) is a mandatory security feature that you will be enrolled in on first login.

Upon enrollment, you will be issued a recovery code that can be used if your 2FA device is lost. We recommend that you save the recovery code in a secure place.


## Reset lost 2FA device

The following steps will let you change your 2FA device if the device has been lost.

You will require your recovery code for this process.

1.  Begin signing in to the [SSO Homepage](sso:).
2.  When prompted to type in the 2FA code, paste your recovery code instead.
3.  This will prompt the system for re-enrolling your 2FA device. Follow the on-screen instructions for finishing the re-enrollment.
4.  Once completed, you will be issued a new recovery code. We recommend that you save the recovery code in a secure place.

## Changing 2FA device

The following steps will let you change your 2FA device:

1.  Go to the [SSO Homepage](sso:).
    - If not already authenticated, please sign in.
2.  Click on "Change 2FA device"
3.  Follow the instructions on the page to finish re-enrolling.

**Please note that resetting your 2FA device will not reset your recovery code.**

## Resetting 2FA recovery code

The following steps will let you reset your recovery code.

1.  Go to the [SSO Homepage](sso:).
    - If not already authenticated, please sign in.
2.  Click on "Reset 2FA recovery code"
3.  Follow the instructions on the page to generate a new recovery code.