Setting up two-factor authentication

Two-factor authentication (2FA) adds a second step to signing in: your password plus a 6-digit code from an authenticator app. Even if someone learns your password, they can't get in without your phone.

Setting it up

1. After you finish setting up your account, we'll offer to turn on 2FA. You can also do it any time from Settings.
2. Install an authenticator app (Google Authenticator, Microsoft Authenticator, Authy, or 1Password all work).
3. Scan the QR code, or type the key in manually if you can't scan.
4. Enter the 6-digit code your app shows to confirm.
5. Save your recovery codes — they're shown only once.

Recovery codes

Recovery codes let you sign in if you lose your phone. Store them somewhere safe, like a password manager. Each one works a single time. You can generate a fresh set from Settings if you run low.

They're your only backup. Your data is encrypted and we don't collect a phone number or ID, so we can't verify you another way. If you lose your password, your account email, and your recovery codes, no one — including us — can get you back in. In that case we can only delete the account, never recover or transfer the data. Keep at least one recovery code somewhere you won't lose it.

Tips and common issues

• The code keeps getting rejected. Authenticator codes are time-based, so make sure your phone's clock is set to update automatically.
• Can't scan the QR code? Use the manual key shown beneath it.
• Lost your phone? Use one of your recovery codes to sign in, then set 2FA up again on your new device.
• Lost both phone and codes? As long as you can still reset your password by email, turn 2FA off from Settings once you're back in. If you've lost your email too, the account can't be recovered — we can only delete it.
• Want to turn it off? You can disable 2FA from Settings after confirming your password.

Still stuck?

If 2FA setup isn't working, reach out via budgeto.app/contact or email [email protected] and we'll help you get sorted.