Removing Two-Factor Authentication (2FA)
Turning 2FA off, and doing it safely
Written By _flush_f0x_
Last updated About 2 hours ago
If you need to turn off two-factor authentication, for example because you are switching to a new phone or authenticator app, you can do it from the Security tab in Settings. Because 2FA is one of the strongest protections on your account, it is worth only removing it when you have a reason, and turning it back on as soon as you can.
Turning 2FA off
Open the Security tab in Settings. With 2FA enabled, the 2FA row shows that it is on, along with the option to turn it off.
Figure 1: the Security tab, with the option to turn 2FA off
1. Open your account menu in the top right, choose Settings, then the Security tab.
2. On the 2FA row, select the option to turn it off.
3. Confirm it is you. You will usually be asked to enter the current 6-digit code from your authenticator app (and may be asked for your password) before 2FA is removed.
4. Once confirmed, 2FA is removed, and future logins no longer ask for a code.
Removing 2FA lowers your security
With 2FA off, your password alone protects your account. If you are removing it to switch authenticator apps or devices, the safest approach is to set up 2FA again on the new app straight after, so your account is never left on password-only protection for long.
If you have lost access to your authenticator
If you want to remove 2FA because you can no longer get a code, for example you lost or reset the phone with your authenticator app, you may not be able to confirm the removal with a code.
Use your backup codes. If you saved the backup or recovery codes when you set up 2FA, you can use one to confirm and regain access.
No backup codes? Contact our support team through the official site. They can help you recover access to your account securely.
Never share a code to remove 2FA
Flush.io will never ask you to send your 2FA codes, backup codes, or password to anyone. If a message asks for them to "help" remove 2FA, it is not genuine. Only ever manage 2FA yourself from the Security tab on the official site.
Good to know
Re-enable it as soon as you can. If you only removed 2FA to move to a new app or device, set it up again right away; our guide on enabling 2FA walks through it.
Keep your password strong. With 2FA off, a strong, unique password matters even more. Our guide on changing your password can help.
Your authenticator app entry becomes unused. After removing 2FA, the old entry in your authenticator app no longer works for Flush.io; you can delete it there to keep things tidy.
Check your sessions too. If you are tightening up your account security, it is a good moment to review your active sessions as well.
Was this helpful?
Still need help? Ask the team