Two-factor authentication (also known as 2FA or MFA) adds an extra layer of security to your account. After entering your login credentials (email and password), you’ll be asked to confirm your login using a code generated by your authenticator app, such as Authy, 1Password, or Google Authenticator.
Setup is quick and only needs to be completed once.
Who uses 2FA
Enterprise accounts and above: 2FA is automatically enabled for everyone who accesses the account's Organizations. This is a standard security requirement for these plans.
Other plans, including the free trial: 2FA is optional. The Organization Owner can make it mandatory for all members, but individual users can also enable it for their own accounts at any time.
SSO users: nothing changes. Authentication continues to be handled by your identity provider, with no additional 2FA required.
To check whether 2FA is on for you, click your name in the top-right corner and open Account settings:
You can also access this page through this direct link.
How to Set Up
2FA Disabled
If you're logged out of your account and 2FA is disabled for you, you'll be prompted to configure it during login, right after entering your email and password:
⚠️ Important: You will be asked to enter two codes during your first 2FA setup, in sequence:
The first code activates your authenticator app.
A new code will then be requested to complete your login.
This is expected behavior and doesn't indicate an issue with your authenticator app.
On the other hand, if you're already logged in to your account and 2FA is disabled for you, AdOpt displays the "Enable" button in the Two-factor authentication field:
When you click "Enable", the following two-factor authentication setup screen will appear:
To set it up, follow these steps:
Open an authenticator app on your phone, such as Google Authenticator, 1Password, or Authy. Scan the (1) QR code displayed on the screen. If that doesn't work, or if you prefer, enter the (2) key shown right below it.
The app will generate a code. Enter the (3) 6-digit code displayed in the app and confirm.
That's it! From now on, whenever your user logs in, simply enter the code from the authenticator app after providing your email and password.
💡 Tip: If your authenticator app supports backups or syncing across devices, make sure this feature is enabled. This will make switching phones much easier. Print and keep the QR code and key in a safe place, accessible only to you. They are unique to your AdOpt account and are used to generate your authentication codes.
2FA Enabled
If 2FA is already enabled, the following screen will be displayed:
Click the "Change Authenticator" button to change or recover your authentication setup.
Enterprise accounts: 2FA cannot be disabled
On Enterprise plans, two-factor authentication is mandatory for all Organization members, including the Owner.
Because of this requirement, you cannot disable 2FA from your Account Settings. The "Change Authenticator" option is available if you need to update your authenticator app.
The reason for this restriction is also displayed on this screen.
How to Enable 2FA for All Members of an Organization
If you are the Owner of an Organization:
In your Organization's sidebar menu, click (1) Settings.
In the (2) Security section, enable Require two-factor authentication.
Once this option is enabled, all Organization members will be required to set up 2FA the next time they log in.
ℹ️ Info: If your Organization is on AdOpt's Enterprise Plan, 2FA has been mandatory for all Organization members (including the Owner) since October 8, 2026.
Check Whether 2FA Has Been Set Up by Your Organization Members
If you're the Account Owner or an Organization Administrator and 2FA is enabled for the Organization, you can check whether each member has already set up 2FA in the Members tab:
FAQ
Getting a new phone?
Before switching devices, go to Account Settings and click Change Authenticator. This way, you can transfer your 2FA setup to your new device.
Lost access to your authenticator app?
No problem!
On the login screen, click the "Lost access to my authenticator app" link.
A "Contact Support" window will open with a pre-filled message containing the email address associated with your account.
You can copy the message or open your email app to send the request directly to our support team at sos@goadopt.io.
Can the Organization Owner reset a member's 2FA?
No. The Organization Owner cannot reset another member's two-factor authentication.
The "Change Authenticator" option requires a valid code from your current authenticator app, so it cannot be used to reset 2FA if you've lost access to the app.
If you can no longer access your authenticator app, please contact our support team through the link available on the login screen.
What is 2FA/MFA for?
2FA/MFA protects access to your AdOpt account. It does not affect your Cookie Banner or your website visitors.
My code isn't working. What can I do?
The code in your authenticator app should change every few seconds. If it is not working this way, check your authentication app configuration.