Account
Two-Factor Authentication
Two-Factor Authentication
Two-Factor Authentication (2FA) adds an extra security layer to your account. Even if someone knows your password, they can't access your account without a second verification method.
Why Enable 2FA
Password Not Enough: Passwords can be guessed, stolen, or leaked in data breaches. 2FA requires a second, harder-to-steal factor.
Protects Your Learning: Keeps your personalized plan, learning progress, and subscription secure.
Peace of Mind: Reduces anxiety about account compromise.
Industry Standard: Most apps you use (Google, Apple, Microsoft, banking apps) offer 2FA. Enable it here too.
2FA Methods Supported
GapFix supports three 2FA methods:
Authenticator App (Recommended): Generate time-based codes using an app like Google Authenticator, Microsoft Authenticator, Authy, or 1Password. Codes change every 30 seconds. Works offline.
SMS Text Message: Receive a one-time code via text. Requires active phone number. Works wherever you have cell service.
Backup Codes: Single-use codes to access your account if you lose access to your authenticator or phone. Keep these safe but separate from your password.
Setting Up 2FA
From Settings:
- Go to Settings > Account Security
- Tap "Set Up Two-Factor Authentication"
- Choose your method: Authenticator App, SMS, or both
Setting Up Authenticator App (Recommended)
Step 1: Download an authenticator app:
- Google Authenticator (iOS/Android)
- Microsoft Authenticator (iOS/Android)
- Authy (iOS/Android/Desktop)
- 1Password (iOS/Android)
- LastPass Authenticator (iOS/Android)
Step 2: On the 2FA setup screen, tap "Authenticator App"
Step 3: You'll see a QR code. Open your authenticator app and:
- Tap "+" or "Scan QR Code"
- Point your phone's camera at the QR code
- The app automatically adds GapFix to your account list
Step 4: Your authenticator app now generates a 6-digit code that changes every 30 seconds
Step 5: In GapFix, enter the 6-digit code shown in your authenticator
Step 6: You'll receive backup codes (see below). Save them securely
Step 7: 2FA is now active. You'll need your authenticator code to log in
Setting Up SMS (Text Message)
Step 1: On the 2FA setup screen, tap "SMS Text Message"
Step 2: Enter your phone number and tap "Send Code"
Step 3: A verification code arrives via text. Enter it in the app to verify your number
Step 4: You'll receive backup codes (see below). Save them securely
Step 5: SMS 2FA is now active. On login, you'll receive a text code to enter
Backup Codes: Crucial!
When you enable 2FA, you receive 10 one-time backup codes. These are critical:
What They Are: Single-use 8-character codes that let you log in if you lose access to your authenticator app or phone.
Why You Need Them: If your phone breaks, you lose your authenticator app, or your SIM card is replaced, backup codes are your only way back into your account.
How to Save Them:
- Screenshot and store in a secure password manager (1Password, Bitwarden, etc.)
- Print and store in a safe place (home safe, safety deposit box)
- Save in a secure note app (Apple Notes with security, Google Keep with verification)
- DO NOT store in an unsecured email or cloud folder
How to Use Them: If you can't access your authenticator or SMS:
- On the login screen, tap "Can't access your authenticator?"
- Tap "Use a backup code"
- Enter one backup code
- That code becomes used and cannot be reused
- You're logged in
Each code works only once. Once all 10 are used, you need new ones (generate in Settings).
Logging In With 2FA
With Authenticator App:
- Enter your email and password normally
- The screen asks for your 2FA code
- Open your authenticator app
- Find GapFix in your account list
- Copy the 6-digit code shown
- Paste or type it in the code field
- Tap "Verify"
Done! You're logged in.
With SMS:
- Enter your email and password normally
- The screen asks for your 2FA code
- Check your text messages for the code from GapFix
- Paste or type it in the code field
- Tap "Verify"
Done! You're logged in.
Managing 2FA
Change Your Method: Go to Settings > Account Security > Two-Factor Authentication. You can switch from SMS to Authenticator, add a second method, or disable 2FA.
Get New Backup Codes: If you've used some backup codes, generate new ones in Settings > Account Security. Your old codes become invalid.
Update Your Phone: If you get a new phone:
- Set up your authenticator app on the new phone
- Scan the QR code from your account settings
- Update your phone number in Settings if using SMS
Lost Your Authenticator: If your phone is lost or stolen:
- Use a backup code to log in
- Go to Settings > Account Security
- Disable 2FA
- Set up 2FA on a new device
Security Tips
Backup Codes: Store them safely but separately from your password. If someone has both, they can access your account.
Authenticator App: Don't share your phone. Don't screenshot the setup QR code and send it to others.
Recovery: If locked out completely, contact help@gapfix.app with proof of identity. We can help recover your account.
Phone Backup: If using an authenticator app, many support cloud backup (with encryption). Enable this on your authenticator app for added security.
Troubleshooting 2FA
Code Doesn't Work: Time-based codes expire after 30 seconds. Try the new code that appears. Verify your phone time is correct (should be automatic).
SMS Code Not Arriving: Verify your phone number is correct. Check spam/junk SMS. Try requesting a new code.
Lost Your Phone: Use a backup code to log in. Then disable 2FA and set it up on a new device.
Forget Authenticator Setup: Contact support. We can temporarily disable 2FA and help you set it up again.
Was this article helpful?