Skip to main content

How do I enable or reset 2FA?

Written by Utkarsh Pathak
Updated today

Two-factor authentication (2FA) is a security layer that ensures only you can access your Kosh account. It is not required at the time of sign-up, but the system will prompt you to set it up after you begin using the platform. We strongly recommend doing this as soon as possible.


Setting up 2FA

When prompted, follow these steps to enable 2FA:

  1. Log in to your account at payout.copperx.io

  2. Go to Settings and select Security

  3. Choose Enable Two-Factor Authentication

  4. Download an authenticator app on your phone β€” Google Authenticator or Authy are recommended

  5. Scan the QR code shown on screen using your authenticator app

  6. Enter the 6-digit code generated by the app to confirm setup

  7. Save your backup codes immediately β€” you will be given a set of one-time backup codes at this step; store them somewhere secure, as these are the only alternative way to access your account if your authenticator app is unavailable

Once set up, you will be asked for a 6-digit code from your authenticator app every time you log in.


Using backup codes

Backup codes are provided to you during the 2FA setup process. If your authenticator app is not working or you have lost access to it, you can use one of your saved backup codes to log in instead.

It is your responsibility to keep your backup codes safe. Kosh cannot retrieve or regenerate them for you.


Can I disable 2FA?

2FA can currently be disabled from your account Settings. However, Kosh may make 2FA mandatory in the future given the security risks of leaving it turned off. We recommend keeping it enabled at all times.


Lost your 2FA app or backup codes?

Kosh does not reset 2FA under any circumstances. If you have lost both your authenticator app access and your backup codes, our team will not be able to help you regain access to your account.

In this situation, your only option is to request deletion of your account and create a new one. To request account deletion, email [email protected] from your registered email address.

To avoid this situation, always store your backup codes in a secure location as soon as you set up 2FA.

Did this answer your question?