> ## Documentation Index
> Fetch the complete documentation index at: https://forexmasters.in/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-factor authentication (2FA)

> Protect your Forex Masters account with two-factor authentication, backup recovery codes, and secure sign-in practices.

Two-factor authentication (2FA) adds a second verification step when you sign in to Forex Masters. In addition to your password, you confirm your identity with a time-sensitive code from an authenticator app.

This helps protect your learning progress, trading journal, workspace data, account preferences, and connected account information—even if your password is exposed.

<Note>
  Forex Masters will never ask for your password, authentication code, or recovery codes through chat, email, social media, or a community message.
</Note>

## Before you begin

To enable 2FA, you need:

* Access to your Forex Masters account
* A mobile device or desktop authenticator app that supports time-based one-time passwords (TOTP)
* A safe place to store recovery codes, such as a password manager or encrypted offline record

Popular authenticator apps include Google Authenticator, Microsoft Authenticator, Authy, 1Password, and similar TOTP-compatible applications.

<Warning>
  Do not use screenshots, unencrypted notes, or shared cloud documents to store recovery codes. Anyone with a recovery code may be able to bypass your normal 2FA prompt.
</Warning>

## Enable two-factor authentication

<Steps>
  <Step title="Open your account security settings">
    Sign in to Forex Masters, open your profile or account menu, then select **Settings** and look for **Security** or **Two-factor authentication**.

    If the option is not currently visible in your account, 2FA may not yet be available for your account type or rollout region. Contact support for confirmation.
  </Step>

  <Step title="Choose an authenticator app">
    Select the option to enable authenticator-app verification. Forex Masters displays a QR code and, where available, a manual setup key.
  </Step>

  <Step title="Add the account to your authenticator app">
    In your authenticator app, choose **Add account** or **Scan QR code**, then scan the code displayed by Forex Masters.

    If scanning is unavailable, use the manual setup key instead. Enter it only in a trusted authenticator app.
  </Step>

  <Step title="Confirm the verification code">
    Enter the current six-digit code generated by your authenticator app. Codes refresh regularly, so use the newest code if verification fails.
  </Step>

  <Step title="Save your recovery codes">
    After confirmation, save the recovery codes provided by Forex Masters. Each code is intended for one-time emergency use when you cannot access your authenticator app.
  </Step>
</Steps>

<CardGroup cols={2}>
  <Card title="Recommended" icon="shield-check">
    Store recovery codes in a reputable password manager protected by a unique master password and its own multi-factor authentication.
  </Card>

  <Card title="Keep separate" icon="mobile-screen">
    Do not keep recovery codes only on the same phone that holds your authenticator app.
  </Card>
</CardGroup>

## Sign in with 2FA enabled

Once 2FA is active, your normal sign-in flow includes an additional verification step:

1. Enter your Forex Masters email address and password.
2. Open your authenticator app.
3. Enter the current verification code for Forex Masters.
4. Complete sign-in.

You may be asked to verify again when signing in from a new device, browser, location, or after a session expires.

<Note>
  Authentication codes are generated on your device. You do not need to wait for an SMS or email code when using an authenticator app.
</Note>

## Use a recovery code

Use a recovery code only when your authenticator app is unavailable—for example, after losing a device or restoring a phone without transferring your authenticator accounts.

<Steps>
  <Step title="Start the normal sign-in process">
    Enter your email address and password.
  </Step>

  <Step title="Choose the recovery option">
    On the 2FA verification screen, select **Use a recovery code** or the equivalent account-recovery option.
  </Step>

  <Step title="Enter an unused recovery code">
    Enter one saved recovery code exactly as stored. A recovery code can normally be used only once.
  </Step>

  <Step title="Secure your account immediately">
    After access is restored, set up 2FA on your current authenticator device and generate a new recovery-code set if the option is available.
  </Step>
</Steps>

<Warning>
  If you use a recovery code because you suspect unauthorized access, change your password immediately and contact Forex Masters Support. Include the email address on the account, but never include your password, 2FA code, or recovery codes in the request.
</Warning>

## Replace or remove an authenticator device

Before replacing, resetting, or giving away a device, move your authenticator entries to your new device when your authenticator app supports a secure transfer.

If you still have access to Forex Masters:

1. Sign in using your current 2FA method.
2. Open **Settings** → **Security**.
3. Disable or update two-factor authentication.
4. Set up your new authenticator device.
5. Confirm sign-in with the new code.
6. Save the newly generated recovery codes, if provided.

If you no longer have the old device, use a recovery code to sign in. If you do not have recovery codes, contact Support to begin account-access recovery.

## If you lose access to both your device and recovery codes

Contact Forex Masters Support through the official support channel available in the platform or Help Center.

To protect your account, Support may ask you to verify account ownership. Be prepared to provide non-sensitive account details, such as:

* The email address associated with your account
* Your username, if applicable
* The approximate date you created the account
* Recent subscription or purchase details, where applicable
* A description of the issue and whether you suspect unauthorized access

Do **not** send:

* Your password
* Current or previous authenticator codes
* Recovery codes
* Full payment-card, bank-account, or broker credentials
* Screenshots that expose sensitive financial or personal information

<AccordionGroup>
  <Accordion title="Why is account recovery not instant?">
    2FA is designed to prevent unauthorized access. When the normal verification method and recovery codes are unavailable, Forex Masters may need additional time to validate ownership before changing security settings.
  </Accordion>

  <Accordion title="Can Support see or retrieve my authenticator codes?">
    No. Authenticator codes are generated by your authenticator app and should remain private. Support should never request them.
  </Accordion>

  <Accordion title="Can I reuse a recovery code?">
    No. Treat each recovery code as single-use. After using one, review your account security and replace your recovery-code set when the option is available.
  </Accordion>
</AccordionGroup>

## Keep your account secure

2FA is strongest when combined with sound account practices.

<CardGroup cols={3}>
  <Card title="Use a unique password" icon="key">
    Create a long, unique password for Forex Masters. Do not reuse a password from email, broker, banking, or social accounts.
  </Card>

  <Card title="Verify the site" icon="globe">
    Sign in only through the official Forex Masters website. Check the address carefully before entering account details.
  </Card>

  <Card title="Protect your devices" icon="laptop">
    Keep your browser, operating system, authenticator app, and device lock screen up to date.
  </Card>
</CardGroup>

## Recognize phishing attempts

Attackers may imitate platform emails, login screens, support messages, or urgent account alerts. Their goal is often to capture your password and 2FA code in real time.

Stop and verify if a message:

* Creates urgency, such as “your account will be closed today”
* Requests an authentication or recovery code
* Sends you to a login page through an unfamiliar link
* Promises guaranteed trading results, account credits, or withdrawals in exchange for verification
* Asks you to install remote-access software or share your screen
* Claims to be Support but contacts you from an unverified channel

<Warning>
  A legitimate support agent will not ask you to read out a current 2FA code or enter it into a page outside the official Forex Masters sign-in flow.
</Warning>

## Suspect unauthorized access?

Take these steps as soon as possible:

<Steps>
  <Step title="Change your password">
    Use a new, unique password that has not been used anywhere else.
  </Step>

  <Step title="Review your security settings">
    Confirm that your 2FA method and recovery-code storage are still under your control.
  </Step>

  <Step title="Secure your email account">
    Your email account is often used for password resets. Change its password and enable 2FA there as well.
  </Step>

  <Step title="Contact Support">
    Report the suspected compromise through an official Forex Masters support channel. Do not share secrets in your request.
  </Step>
</Steps>

<Note>
  Forex Masters provides education, analysis, and platform tools. Account-security features protect access to your Forex Masters account; they do not replace the security controls of your broker, bank, email provider, or payment provider.
</Note>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.