How does two-factor authentication work?

All GravityPDF.com accounts have email two-factor authentication (2FA) enabled. If your password is ever leaked or guessed, an attacker cannot access your account without the corresponding 2FA code.

When you'll be asked for a 2FA code

You'll be prompted to enter a 2FA code when:

• Logging in to GravityPDF.com
• Changing your email address
• Changing your password when logged in
• Switching to an authenticator app for 2FA

Switching to an Authenticator app (TOTP)

An authenticator app is usually considered more secure than email 2FA because codes are generated on your device and remain protected if your email account gets compromised.

To set up 2FA with your authenticator app:

1. Go to the Profile page in your GravityPDF.com account
2. Scan the QR code with your preferred authenticator app (eg. 1Password, Authy, Google Authenticator). Note: you may be asked to reauthenticate before you are shown the QR code.
3. Enter the 6-digit TOTP code from the authenticator app into the verification field
4. After verifying, the page will reload and display your backup codes. Download and store them in a secure location. If you lose access to your authenticator app, the backup codes are the only way to access your account.