What Is Two-Factor Authentication?
Two-Factor Authentication (2FA) adds an extra step when you sign in. After entering your password, you'll also need to provide a short verification code. This means even if someone knows your password, they still can't access your account without the code.
Tomba supports two methods of 2FA:
Authenticator App — Uses an app like Google Authenticator, Authy, or 1Password to generate time-based codes
Email Verification — Sends a one-time code to your email address each time you sign in
You can use one or both methods at the same time.
🔐 Set Up Authenticator App (Recommended)
Using an authenticator app is the most secure option. Here's how to set it up:
In the Two-Factor Authentication section, click Set up next to Authenticator App.
A QR code will appear on your screen.
[Image: totp_qr_code.png] — Upload this image via Intercom's article editor.
Open your authenticator app (Google Authenticator, Authy, etc.) and scan the QR code.
Enter the 6-digit code shown in your app to confirm.
You're all set! From now on, you'll need this code every time you sign in.
Can't scan the QR code? You can also enter the setup key manually into your authenticator app.
📧 Set Up Email 2FA
If you prefer not to use an authenticator app, you can receive codes by email:
In the Two-Factor Authentication section, toggle on Email Verification.
[Image: email_2fa_toggle.png] — Upload this image via Intercom's article editor.
That's it! Each time you sign in, a verification code will be sent to your email address.
🔓 How to Disable 2FA
If you need to turn off two-factor authentication:
Click Disable next to the method you want to turn off.
You may be asked to confirm with your current password or a verification code.
Important: We strongly recommend keeping at least one 2FA method enabled at all times.
📱 Signing In with 2FA
When 2FA is enabled, the sign-in process works like this:
Enter your email and password as usual.
You'll be prompted to enter a verification code.
Open your authenticator app or check your email for the code.
Enter the 6-digit code to complete your sign-in.
[Image: 2fa_verify_screen.png] — Upload this image via Intercom's article editor.
💡 Tips
Save your recovery codes — When you set up authenticator app 2FA, you'll receive backup recovery codes. Store these somewhere safe in case you lose access to your authenticator app.
Use both methods — For maximum security, enable both authenticator app and email 2FA.
Update your authenticator — If you switch phones, make sure to transfer your authenticator app before wiping your old device.
Need Help?
Got questions? Contact our support team we're here to help!