How to Set Up Authenticator App 2FA in Sparkforge

By Sparkforge Support Team ·Last reviewed May 3, 2026

Sparkforge supports TOTP-based authenticator apps (Google Authenticator, Microsoft Authenticator, Authy, etc.) for two-factor authentication. Scan the QR code from My Profile, enter the OTP, and save the 10 backup codes for recovery.

Authenticator-app 2FA generates time-based one-time passwords (TOTP) on your phone instead of sending a code by SMS or email. That blocks SIM-swap attacks, survives carrier outages, and works offline.

Supported apps

Any TOTP-compatible app works, including Google Authenticator, Microsoft Authenticator, and Authy. Sparkforge does not lock you to a single vendor.

Set it up

Go to Agency Settings and open My Profile.
Click Setup next to Authenticator App 2FA.
Open your authenticator app and either scan the QR code or enter the displayed setup code manually.
The app generates a one-time password (OTP). Click Next in Sparkforge and enter the OTP.
Save the 10 backup codes shown on screen — store them somewhere offline you control.

Sign in with your authenticator app

On your next login, choose the authenticator-app option for 2FA, open your app, and enter the current OTP. The code rotates every 30 seconds.

Backup codes

10 codes are issued at a time.
Each code works exactly once.
If you lose your phone, sign in with a backup code and reset 2FA from My Profile.
If you lose the codes too, regenerate them from My Profile while you still have access.

Limitations to know

Only the primary logged-in user can set up an authenticator app on their account. Admins cannot configure it via "Login as."
The authenticator entry shows your agency name. The pairing is per user-agency combination, so you will see one entry per agency you belong to.

Frequently Asked Questions

Which authenticator apps are supported?

Any TOTP-based authenticator app works, including Google Authenticator, Microsoft Authenticator, and Authy.

What if I lose my phone or my backup codes?

If you still have backup codes, sign in with one and regenerate the rest from My Profile. If you have lost both, contact your account admin to reset 2FA on your user.

Can an admin set up authenticator-app 2FA for another user?

No. Only the primary logged-in user can configure an authenticator app on their own account. The Login-as flow does not allow it.

How many backup codes do I get and how often can I use them?

Sparkforge generates 10 backup codes at a time. Each code can be used exactly once for account recovery.

Why is authenticator-app 2FA more secure than SMS or email?

TOTP codes are generated on your device and rotate every 30 seconds. They cannot be intercepted by SIM-swap attacks or phishing as easily as SMS and email codes.