Two-Factor Authentication

Two-factor authentication (2FA) adds a second check when you sign in: as well as your password, you enter a short code that only you can get. It means that even if someone learns your password, they still can't get into your account. Some Scout groups choose to require it for everyone who signs in; you can also turn it on yourself for extra peace of mind.

Setting up two-factor authentication#

Open your profile and find the Two-factor authentication section, then choose Set up 2FA. The setup opens in a panel and walks you through it step by step.

You'll pick how you want to receive your codes:

If you choose the authenticator app, scan the QR code shown on screen. Can't scan it? The code underneath is always visible — copy it and paste it into your app by hand.

Once you enter your first code, you'll be given a set of backup codes. Save these somewhere safe — they're your way back in if you ever lose your phone. Each one works only once.

Signing in with two-factor#

When 2FA is on, signing in has one extra step. After your password, you'll see a screen asking for your code. Enter the 6-digit code from your authenticator app, or the code we email you.

Remember this device#

If your group allows it, you'll see a Remember this device for 30 days tickbox on that screen. Tick it on a device that's just yours — your own phone or laptop — and we won't ask for a code again on that device for 30 days. You'll still type your password each time; it's only the second code we skip.

Leave it unticked on shared or public computers, so the next person can't skip the check.

Managing your trusted devices#

Every device you've chosen to remember shows up in the Trusted devices list in your profile, with when it was last used. If you see one you don't recognise — or you've stopped using a device — choose Forget next to it (or Forget all) and that device will be asked for a code again next time.

Your trusted devices are also cleared automatically if you turn 2FA off or reset your password, so a forgotten laptop can never quietly skip the check later.

Turning two-factor off#

If your group doesn't require 2FA, you can switch your own off from the Two-factor authentication section using Turn off 2FA. To confirm it's really you, we'll ask for a current code first — from your authenticator app, an emailed code, or one of your backup codes.

If your group does require 2FA, there's no off switch — you'll see a short note explaining that your group has made it mandatory.

When your group requires two-factor (group admins)#

Group admins can make 2FA mandatory for everyone who signs in to the group — leaders, admins, parents and helpers alike (it doesn't affect young people, who don't sign in). Open Settings → Advanced → Multi-Factor Authentication and turn on Require multi-factor authentication, then choose which methods people may use.

Two choices to make here:

• Allowed methods — authenticator app, email code, or both. The authenticator app is the stronger choice.
• Allow remember this device — leave this off for the strongest security, or turn it on to let people skip the code for 30 days on devices they trust. Either way, everyone still enters their password every time.

When the requirement is on, anyone in the group who hasn't set up 2FA yet is guided through it the next time they sign in, with a note explaining that the group now requires it. Turning the requirement back off later asks you to confirm with a current code first.

What's next#

• Signing In to Scoutworks — passwords, magic links, and your sign-in options
• Managing Your Profile — your personal details and account settings
• Login and account problems — what to do if you're locked out