Security & MFA

Use Settings - Security to protect your account, manage MFA, and review active sessions.

MFA methods

• Email MFA sends a one-time code to your sign-in email. This is the default option and works without installing an app.
• Authenticator app MFA uses a time-based code from Microsoft Authenticator, Google Authenticator, 1Password, or another TOTP-compatible app.
• When both are available, the authenticator app is usually stronger because the code is generated on your device instead of delivered by email.

Set up an authenticator app

1. Open Settings - Security.
2. Enter your current password in the authenticator app section.
3. Scan the QR code with your authenticator app, or enter the manual key.
4. Enter the 6-digit authenticator code to finish setup.

Backup codes

Backup codes let you sign in if you lose access to your MFA method. Save them immediately after they are shown.

• Store backup codes somewhere secure, such as a password manager.
• Each backup code is single-use.
• If you regenerate backup codes, the old set stops working.

Active sessions and log out everywhere

The Active Sessions table shows recent browser sessions for your account. Log out everywhere ends your current session too and requires every browser or device to sign in again.

Save any in-progress work before using it, then sign in again on the devices you still trust.

Lost phone or missing MFA code

• Try a saved backup code in the same verification code field.
• If you are still locked out, contact a workspace owner or admin and ask for an MFA reset.
• If you are the only owner or cannot reach an admin, use Contact Support.

Security tips

• Use a password manager and a unique password for Quantum SmartQR.
• Review active sessions after changing password, email, or MFA settings.
• Revoke sessions if you used a shared computer or suspect account access you do not recognize.