Two-factor authentication (2FA)

Two-factor authentication is optional but recommended account protection: in addition to your password, you'll need a code from your phone to sign in.

How to enable 2FA

An authenticator app on your phone: Google Authenticator

Install it from the App Store or Google Play. We'll use Google Authenticator as an example.

‹

›

Step 1 · in Finmap

Open security settings

1Go to Settings → Security

2Find the "Two-Factor Authentication" block and the "Google Authenticator" line

Signing in with Google or Apple

When you sign in with Google or Apple, Finmap doesn't send a code to your email: Google or Apple confirms that it's really you.

Finmap always asks for the authenticator app code — whether you sign in with your email and password or with Google or Apple.

To further protect sign-in with Google or Apple, turn on protection on their side as well:

•Google: turn on 2-Step Verification in your Google Account security settings.

•Apple: turn on two-factor authentication for your Apple ID.

Step 2 · in Finmap

Enable 2FA

3Click "Enable 2FA"

4The "Authenticator Setup" window with a QR code will open. Don't close it: you'll need the QR code in the next step

Camera can't read the QR code? Expand "Can't scan the QR code" below it.

Step 3 · in the app on your phone

Scan the QR code

5Open the authenticator app and scan the QR code on the screen

6In Google Authenticator: Add a code → Scan a QR code

Step 4 · in Finmap

Confirm the code

7Enter the 6-digit code from the app in the "Code from Authenticator" field

8Click "Confirm"

The code in the app refreshes every 30 seconds — enter the current one.

Step 5 · in Finmap

Save the recovery code

9Save the recovery code somewhere safe. You'll need it to regain access if you lose your phone.

Done!

2FA is enabled

Setup takes about a minute and only needs to be done once. From now on, each time you sign in, enter your password and the current code from the app.

Important! Don't delete the Finmap entry from the app while 2FA is enabled. Without it, you won't get a code and won't be able to sign in.

‹ ›

If something goes wrong

The code isn't accepted

• The code in the app refreshes every 30 seconds — wait for a new one and enter it right away.
• Make sure automatic date and time is turned on on your phone. If your phone's time is off by even a minute, the codes won't work.

You deleted the app or lost your phone

Use the recovery code you saved during setup. On the code entry screen, click "Use recovery code" and enter it. After signing in, set up 2FA again on your new device.

You're changing phones

While you still have your old phone, transfer your accounts in the authenticator app to the new device (in Google Authenticator — via "Transfer accounts"). Or turn off 2FA in Settings → Security and set it up again on your new phone.

How not to lose access

• Keep your recovery code somewhere other than your phone: in a password manager or on paper in a safe place.
• Turn on backups in your authenticator app: in Google Authenticator — sync with your Google account.