# 2FA — Web app

A screen that guides users through setting up or completing two-factor authentication to add a second layer of security to their account

Source: https://www.checklist.design/web-app/2-factor-authentication

## Items

### Method selection
Authenticator app, SMS, or email code

_Tip: Offer at least 2 methods as some users potentially don't have access to one or the other_

### Setup instructions
Clear step-by-step guidance for completing setup, particularly for authenticator flows that require scanning a QR code

### QR code or setup key
A scannable QR code or copyable key for linking an authenticator app to the account

_Tip: Ensure QR code size large enough to be easy to scan_

### Verification step
A code entry step confirming the setup was successful before 2FA is enabled on the account

_Tip: Enabling 2FA without this step risks a silent setup failure that locks the user out — a serious support burden_

### Recovery codes
A set of one-time backup codes the user can use if they lose access to their 2FA method

_Tip: Make download or copying the code a required step before completing setup for the sake of the user_

### Setup confirmation
A clear success state confirming that 2FA is now active on the account

### Disable or reset option
A way for users to turn off or reconfigure 2FA, accessible from account security settings

_Tip: Re-authentication should be required before disabling 2FA_

## License for the Checklist Design collection

Checklist Design collection: https://github.com/Checklist-Design/skills
Snapshot: bfae71e507b1b7c03c12e0756402b60eb80f5d14 · Imported: 2026-11-12
Republished under the MIT License. Original checklist text belongs to Checklist Design.

MIT License

Copyright (c) 2026 Checklist Design

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.