Skip to main content
Multi-Factor Authentication (MFA) adds a second verification step when signing in to Formo. After entering your email, you’ll be prompted to enter a time-based one-time password (TOTP) from an authenticator app on your device.
MFA is available to all Formo users and can be enabled in your account settings.

​
How it works

Formo uses TOTP (Time-based One-Time Passwords) for MFA. After signing in with your email, you’ll be prompted to enter a 6-digit code from your authenticator app before accessing your dashboard.

​
Supported authenticator apps

Any TOTP-compatible authenticator app works with Formo, including:
  • Google Authenticator
  • Authy
  • 1Password
  • Microsoft Authenticator

​
Enabling MFA

1

Open security settings

Navigate to Account Settings > Security in the Formo dashboard.
2

Enable two-factor authentication

Toggle the Enable 2FA switch. A setup dialog will appear with a QR code.
3

Scan the QR code

Open your authenticator app and scan the QR code. If you can’t scan the QR code, click to copy the secret key and enter it manually in your authenticator app.
Save the secret key in a secure location. This is the only time it will be displayed and can be used to recover access if you lose your device.
4

Verify with a code

Enter the 6-digit code from your authenticator app to complete the setup.
Once verified, MFA is active on your account. You’ll be prompted for a TOTP code on every sign-in.

​
Signing in with MFA

  1. Enter your email on the Formo sign-in page
  2. Complete email verification
  3. When prompted, enter the 6-digit code from your authenticator app
  4. The code is verified automatically once all 6 digits are entered

​
Disabling MFA

1

Open security settings

Navigate to Account Settings > Security in the Formo dashboard.
2

Disable two-factor authentication

Toggle off the Enable 2FA switch. A confirmation dialog will appear.
3

Confirm with a code

Enter a valid 6-digit code from your authenticator app to confirm disabling MFA.
Disabling MFA removes the additional security layer from your account. Only disable it if you have an alternative reason, such as switching to a new authenticator device.

​
Account recovery

If you lose access to your authenticator device, contact support@formo.so. MFA resets must go through Formo support: your workspace Owner or Admin cannot reset another user’s MFA themselves (they can only see whether MFA is enabled or disabled for a member). Formo support will verify your identity and reset your MFA so you can re-enroll with a new device.