Studio
Account security (2FA)
Two-factor authentication (2FA) adds a second check at login beyond your password. Studio uses a time-based one-time password (TOTP) that you generate with an authenticator app on your phone.
Setting up 2FA
- Open Account settings in Studio and go to the Security tab.
- Click Enable two-factor authentication.
- Scan the QR code with your authenticator app (for example Google Authenticator, Authy, or any other TOTP-compatible app). Alternatively, copy the text code and enter it manually.
- Enter the 6-digit code your authenticator app shows and click Verify and enable.
- Save your backup codes (see below) and click Done.
From this point, every login to Studio asks for your password and then a TOTP code from your authenticator app.
Backup codes
When you enable 2FA, Studio generates 10 single-use backup codes. Each code is in the format XXXX-XXXX (8 uppercase hex characters, grouped for readability). These codes let you log in if you lose access to your authenticator app.
Each backup code works once. After you use one to log in, it is consumed and cannot be reused. If you are running low, generate a fresh set from the Security tab in Account settings.
Disabling 2FA
Go to Account settings, open the Security tab, and click Disable two-factor authentication. You will need to confirm with a valid TOTP code or a backup code. After disabling, your existing backup codes are also invalidated.