Two-factor authentication
Two-factor authentication (2FA)¶
For additional security, two-factor authentication can be activated.
Setting up 2FA¶
- Log in to Anton
- Open Profile → Security
- Click Activate two-factor authentication
- Scan the QR code with an authenticator app
- Enter the code from the app to confirm
Supported authenticator apps¶
Any TOTP-compatible app works. Recommended open source apps:
| App | Platform | Open source |
|---|---|---|
| Aegis Authenticator | Android | ✓ |
| 2FAS | Android, iOS | ✓ |
| Proton Authenticator | Android, iOS | ✓ |
| FreeOTP+ | Android | ✓ |
| Tofu | iOS | ✓ |
| KeePassXC | Windows, macOS, Linux | ✓ |
| Bitwarden | All platforms | ✓ |
Other compatible apps: Authy, Google Authenticator, Microsoft Authenticator, 1Password
Deactivating 2FA¶
Admins can reset 2FA:
- In the admin area, go to Users
- Find the user in the list
- Click the Reset 2FA button (in the table row)
Alternatively, also on the user's edit page:
- In the admin area, go to Users
- Select the user → Edit
- Click the Reset 2FA button
Troubleshooting¶
| Problem | Solution |
|---|---|
401 Unauthorized |
Check the token, is the header formatted correctly? |
403 Forbidden |
Check the user permissions |
Invalid key supplied |
API token missing or invalid |
| 2FA code is not accepted | Synchronise the time on the device |