Setting Up Two-Factor Authentication
Two-factor authentication (2FA) adds an extra layer of security to your account. Even if someone obtains your password, they cannot access your account without the second factor.
How 2FA Works
Gender Journey uses Time-based One-Time Passwords (TOTP). After entering your password, you are prompted for a six-digit code that changes every 30 seconds. This code is generated by an authenticator app on your phone.
Setting Up 2FA
- Go to Settings and select Security.
- Tap Enable Two-Factor Authentication.
- Open your authenticator app (Google Authenticator, Authy, Microsoft Authenticator, or any TOTP-compatible app).
- Scan the QR code displayed on screen, or enter the setup key manually.
- Enter the six-digit code from your authenticator app to verify the setup.
- Download your backup codes — these are essential for emergency access.
Backup Codes
When you enable 2FA, Gender Journey generates 10 single-use backup codes. These are your emergency access method if you lose your phone or cannot use your authenticator app.
Important:
- Each backup code can only be used once.
- Store them somewhere safe — a password manager, a printed copy in a secure location, or an encrypted file.
- If you run out of backup codes, you can generate new ones from the Security settings.
Trusted Devices
To avoid entering a 2FA code every time you sign in on the same device, you can mark a device as trusted. Trusted devices are remembered for 30 days, after which you will need to enter a code again.
To trust a device, tick the Remember this device checkbox when entering your 2FA code during sign-in.
When 2FA Is Required
Beyond regular sign-in, 2FA verification is required for sensitive actions:
- Managing your subscription.
- Changing your email address or password.
- Accessing the billing portal.
- Deleting your account.
This ensures that even if someone gains access to an active session, they cannot make critical changes without the second factor.
Disabling 2FA
If you need to disable 2FA, go to Settings > Security and select Disable Two-Factor Authentication. You will need to enter a current 2FA code or backup code to confirm. We strongly recommend keeping 2FA enabled at all times.