Enable 2FA — Protect Your Account

Two-factor authentication (2FA) adds a critical layer of security to your Data Mammoth account. With 2FA enabled, logging in requires both your password and a verification code from an authenticator app — so even if your password is compromised, your account remains protected.

Why Enable 2FA?

• Protection against password theft — Stolen passwords alone cannot grant access.
• Defense against phishing — Even if you accidentally enter your password on a fake site, the attacker cannot log in without the second factor.
• Industry best practice — 2FA is recommended for all accounts that manage infrastructure and sensitive data.
• Compliance — Many security standards require multi-factor authentication for administrative access.

Prerequisites

You will need an authenticator app installed on your smartphone:

• Google Authenticator (iOS / Android)
• Authy (iOS / Android / Desktop)
• Microsoft Authenticator (iOS / Android)
• 1Password (built-in authenticator)
• Bitwarden (built-in authenticator)

Any TOTP (Time-based One-Time Password) compatible app will work.

How to Enable 2FA

Step 1 — Navigate to Security Settings

Log in to your Data Mammoth dashboard.

Click your profile or account name in the top-right corner.

Select Account Settings.

Navigate to the Security tab.

Step 2 — Start 2FA Setup

Find the Two-Factor Authentication section.

Click Enable 2FA or Set Up 2FA.

Step 3 — Scan the QR Code

A QR code is displayed on screen.

Open your authenticator app.

Tap Add Account or the + button.

Select Scan QR Code and point your camera at the screen.

The app will add a Data Mammoth entry and begin generating 6-digit codes.

If you cannot scan the QR code, click Enter manually and type the secret key into your authenticator app.

Step 4 — Enter the Verification Code

Your authenticator app displays a 6-digit code that changes every 30 seconds.

Enter the current code in the verification field on the Data Mammoth page.

Click Verify or Confirm.

Step 5 — Save Backup Codes

After verification, you will be presented with a set of backup codes (also called recovery codes).

Important: Save these codes immediately in a secure location.

• Download the codes as a file.
• Print them and store in a safe place.
• Save them in a password manager.

Backup codes are single-use codes that let you log in if you lose access to your authenticator app. Each code can only be used once.

Step 6 — Confirm Setup

2FA is now active on your account. The next time you log in, you will be prompted for both your password and a verification code.

Logging In with 2FA

Enter your email and password as usual.

When prompted, open your authenticator app.

Enter the current 6-digit code.

Click Verify to complete the login.

Managing 2FA

Changing Your 2FA Device

If you get a new phone or want to switch authenticator apps:

Go to Account Settings > Security.

Click Disable 2FA (you will need to enter a code or backup code).

Re-enable 2FA and scan the new QR code with your new device/app.

Save the new set of backup codes.

Disabling 2FA

If you need to disable 2FA temporarily:

Go to Account Settings > Security.

Click Disable 2FA.

Enter a verification code or backup code.

Confirm.

We strongly recommend keeping 2FA enabled at all times. Only disable it if absolutely necessary, and re-enable it immediately afterward.

Lost Access to 2FA

If you cannot access your authenticator app:

Use a Backup Code

On the 2FA verification screen, look for Use a backup code link.

Enter one of your saved backup codes.

You will be logged in. Immediately set up 2FA on a new device.

Contact Support

If you have no backup codes:

Contact Data Mammoth support. See Locked Out of 2FA — Recovery Steps.

You will need to verify your identity through alternative means.

Once verified, support can disable 2FA so you can re-enable it.

2FA Best Practices

Enable on all accounts — Use 2FA on every service that supports it, not just Data Mammoth.

Use an authenticator app — Authenticator apps are more secure than SMS-based 2FA.

Save backup codes — Store them securely and separately from your password.

Use a password manager — Many password managers can store both passwords and TOTP codes.

Set up on multiple devices — Some authenticator apps (like Authy) support device sync for redundancy.

What to Do Next

• SSH Key Best Practices — Secure server access.
• Security at Data Mammoth — Our security overview.
• Locked Out of 2FA — Recovery Steps — Recovery guide.
• Complete Server Security Checklist — Full security review.