--- title: "Set up two-step verification in Kommo" slug: "two-step-verification" description: "Add an extra layer of security to your Kommo account by enabling two-step verification for safer logins." tags: ["Two Step Verification", "Authenticator App", "Backup Codes"] status: "update" updated: 2026-10-29T12:27:44Z published: 2026-10-29T12:27:44Z canonical: "support.kommo.com/two-step-verification" --- > ## Documentation Index > Fetch the complete documentation index at: https://support.kommo.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # Set up two-step verification in Kommo Learn how two-step verification protects your Kommo account, set it up with email or an authenticator app, and manage your backup codes. > [!NOTE] > **What you’ll need:** > > - Access to the email address linked to your Kommo profile. > - **For authenticator app verification:** An authenticator app, such as Google Authenticator or Microsoft Authenticator. > - **For mandatory two-step verification:** Admin access. > > **Keep in mind:** > > - You can use **email** or an **authenticator app** for two-step verification. > - You can use only one two-step verification method at a time. > - If you lose access to your verification method, you can use a backup code. > - Backup codes are shown only once during setup. Save them somewhere secure. > - Some [sensitive actions](/resources/docs/manage-security-with-two-step-verification-in-kommo) require two-step verification to be enabled. Two-step verification, also known as two-factor authentication (2FA), adds an extra layer of security to your Kommo account. When it’s enabled, you confirm your login using either **email** or an **authenticator app**. This helps protect your account even if someone knows your password. Kommo also uses two-step verification for some sensitive actions. To learn which actions are protected and how Admins can require two-step verification for all users, see [Manage security with two-step verification in Kommo](/resources/docs/manage-security-with-two-step-verification-in-kommo). ## Set up two-step verification Choose the verification method you want to use: - [Set up with email](/resources/docs/two-step-verification#set-up-with-email) - [Set up with an authenticator app](/resources/docs/two-step-verification#set-up-with-an-authenticator-app) To learn about other ways to protect your profile, including passkeys and active sessions, see [Manage your profile security in Kommo](/resources/docs/manage-your-profile-security-in-kommo)**.** ### Set up with email 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn on **Email** verification. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814616.png) 3. In the modal, click **Send code**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814622.png) 4. Enter the 6-digit code sent to your email and click **Confirm**. 5. Kommo will show your backup codes. Copy them and [save them in a secure location.](/resources/docs/two-step-verification#save-your-backup-codes) ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814624.png) Once setup is complete: - Two-step verification appears as **Active** in your profile. - You’ll receive a confirmation email. - You’ll be logged out of all devices except the current one. When you log in again, enter the verification code sent to your email. ### Set up with an authenticator app An authenticator app generates **TOTP (Time-based One-Time Password) codes** for verification. Each code is valid for **30 seconds** and is automatically replaced with a new one after it expires. Enter the current code in Kommo before it expires. Each code can be used **only once**. If you’ve already used a code, wait for your authenticator app to generate a new one before confirming another action. > [!NOTE] > **Note:** TOTP can only be set up in the Kommo web version. In the mobile app, TOTP setup is available only if Mandatory two-step verification is enabled for the account. Once TOTP is set up, you can use it to log in to both the web version and the mobile app. To set it up: 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn on **Authenticator app** verification. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814626.png) 3. First, you need to verify your identity. Click **Send code**, and Kommo will send a verification code to the email address linked to your profile. When you receive it, enter the code and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276818002.png) 4. A QR code will appear. Open your authenticator app and scan it. 5. Your authenticator app will generate a temporary verification code. 6. Enter the code in Kommo and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276818021.png) 7. Kommo will show your backup codes. Copy them and save them in a secure location. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814624.png) If you can’t scan the QR code (for example, if your authenticator app is installed on the same device): 1. Click **Can’t scan the QR code?** ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819063.png) 2. In the opened modal, copy the setup key and enter it manually in your authenticator app. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819156.png) 3. Your authenticator app will generate a verification code. Close the modal, enter the code in Kommo, and click **Confirm**. 4. Kommo will show your backup codes. Copy them and save them in a secure location. Once setup is complete: - Two-step verification appears as **Active** in your profile. - You’ll receive a confirmation email. - You’ll be logged out of all devices except the current one. Use the current code from your authenticator app whenever Kommo asks you to verify your login. ## Save your backup codes When you enable two-step verification, Kommo provides backup codes that you can use if you can’t access your regular verification method. Keep these points in mind: - Backup codes are shown only once during setup. Save them somewhere secure. - Each backup code can be used only once. - Backup codes are re-issued every time you change your two-step verification method. Your previous backup codes stop working. - Store your backup codes separately from your regular verification method. If you lose access to your email or authenticator app, use one of your saved backup codes to log in. > [!NOTE] > **Note:** If you can’t access your verification method or backup codes, contact [Kommo support](https://www.kommo.com/contact-us/). ## Change two-step verification method You can switch between email and an authenticator app as your two-step verification method. 1. Go to **Settings → Security → Profile security**. 2. In the **2-step verification** section, turn on the inactive verification method you want to use. 3. In the opened modal, click **Change**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819764.png) 4. Get a verification code using your current method: - **Email:** Click **Send code** and check the email address linked to your profile. - **Authenticator app:** Open your authenticator app and find the current code. 5. Enter the code in Kommo and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819779.png) 6. Set up your new verification method: To switch to email verification: 1. Click **Send code**. 2. Enter the code sent to the email address linked to your profile. 3. Click **Confirm**. 4. Copy the new backup codes and save them in a secure location. To switch to authenticator app verification: 1. Open your authenticator app and scan the **QR code** shown in Kommo. 2. Enter the temporary code generated by the authenticator app. 3. Click **Confirm**. 4. Copy the new backup codes and save them in a secure location. If you can’t scan the QR code, click **Can’t scan the QR code?**, copy the setup key, and enter it manually in your authenticator app. Then enter the generated code in Kommo and click **Confirm**. After you change the method, Kommo generates new backup codes. Your previous backup codes no longer work. ## Disable two-step verification How you turn off two-step verification depends on the method you use. ### Disable email verification 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn off **Email** verification. 3. To verify your identity, click **Send code**. Kommo will send a verification code to the email address linked to your profile. 4. Enter the code and click **Disable**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276823062.png) If you can’t access your email: 1. Click **Send code**. 2. In the code field, enter one of the backup codes you saved when you enabled two-step verification — instead of the code sent to your email. 3. Click **Disable**. ### Disable authenticator app verification 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn off **Authenticator app** verification. 3. To verify your identity, open your authenticator app and enter the current verification code. 4. Click **Disable**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276823144.png) If you can’t access your authenticator app: 1. Click **Can’t use the app?** 2. Enter one of the backup codes you saved when you enabled two-step verification. 3. Click **Disable**. ### After you disable two-step verification - You’ll receive a confirmation email. - Existing backup codes become invalid. - Email or authenticator app verification will no longer be required when you log in. Learn how two-step verification protects your Kommo account, set it up with email or an authenticator app, and manage your backup codes. > [!NOTE] > **What you’ll need:** > > - Access to the email address linked to your Kommo profile. > - **For authenticator app verification:** An authenticator app, such as Google Authenticator or Microsoft Authenticator. > - **For mandatory two-step verification:** Admin access. > > **Keep in mind:** > > - You can use **email** or an **authenticator app** for two-step verification. > - You can use only one two-step verification method at a time. > - If you lose access to your verification method, you can use a backup code. > - Backup codes are shown only once during setup. Save them somewhere secure. > - Some [sensitive actions](https://docs.google.com/document/d/1f0Ae8an4InLVaknvg3MuGVfLJZ0rvtzNaJZaER-iAn8/edit?tab=t.sbd88cx87xz6) require two-step verification to be enabled. Two-step verification, also known as two-factor authentication (2FA), adds an extra layer of security to your Kommo account. When it’s enabled, you confirm your login using either **email** or an **authenticator app**. This helps protect your account even if someone knows your password. Kommo also uses two-step verification for some sensitive actions. To learn which actions are protected and how Admins can require two-step verification for all users, see [Manage security with two-step verification in Kommo](/resources/docs/manage-security-with-two-step-verification-in-kommo). ## Set up two-step verification Choose the verification method you want to use: - [Set up with email](/resources/docs/two-step-verification#set-up-with-email) - [Set up with an authenticator app](/resources/docs/two-step-verification#set-up-with-an-authenticator-app) To learn about other ways to protect your profile, including passkeys and active sessions, see [Manage your profile security in Kommo](/resources/docs/manage-your-profile-security-in-kommo)**.** ### Set up with email 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn on **Email** verification. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814616.png) 3. In the modal, click **Send code**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814622.png) 4. Enter the 6-digit code sent to your email and click **Confirm**. 5. Kommo will show your backup codes. Copy them and [save them in a secure location.](/resources/docs/two-step-verification#save-your-backup-codes) ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814624.png) Once setup is complete: - Two-step verification appears as **Active** in your profile. - You’ll receive a confirmation email. - You’ll be logged out of all devices except the current one. When you log in again, enter the verification code sent to your email. ### Set up with an authenticator app An authenticator app generates **TOTP (Time-based One-Time Password) codes** for verification. Each code is valid for **30 seconds** and is automatically replaced with a new one after it expires. Enter the current code in Kommo before it expires. Each code can be used **only once**. If you’ve already used a code, wait for your authenticator app to generate a new one before confirming another action. > [!NOTE] > **Note:** TOTP can only be set up in the Kommo web version. In the mobile app, TOTP setup is available only if Mandatory two-step verification is enabled for the account. Once TOTP is set up, you can use it to log in to both the web version and the mobile app. To set it up: 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn on **Authenticator app** verification. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814626.png) 3. First, you need to verify your identity. Click **Send code**, and Kommo will send a verification code to the email address linked to your profile. When you receive it, enter the code and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276818002.png) 4. A QR code will appear. Open your authenticator app and scan it. 5. Your authenticator app will generate a temporary verification code. 6. Enter the code in Kommo and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276818021.png) 7. Kommo will show your backup codes. Copy them and save them in a secure location. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276814624.png) If you can’t scan the QR code (for example, if your authenticator app is installed on the same device): 1. Click **Can’t scan the QR code?** ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819063.png) 2. In the opened modal, copy the setup key and enter it manually in your authenticator app. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819156.png) 3. Your authenticator app will generate a verification code. Close the modal, enter the code in Kommo, and click **Confirm**. 4. Kommo will show your backup codes. Copy them and save them in a secure location. Once setup is complete: - Two-step verification appears as **Active** in your profile. - You’ll receive a confirmation email. - You’ll be logged out of all devices except the current one. Use the current code from your authenticator app whenever Kommo asks you to verify your login. ## Save your backup codes When you enable two-step verification, Kommo provides backup codes that you can use if you can’t access your regular verification method. Keep these points in mind: - Backup codes are shown only once during setup. Save them somewhere secure. - Each backup code can be used only once. - Backup codes are re-issued every time you change your two-step verification method. Your previous backup codes stop working. - Store your backup codes separately from your regular verification method. If you lose access to your email or authenticator app, use one of your saved backup codes to log in. > [!NOTE] > **Note:** If you can’t access your verification method or backup codes, contact [Kommo support](https://www.kommo.com/contact-us/). ## Change two-step verification method You can switch between email and an authenticator app as your two-step verification method. 1. Go to **Settings → Security → Profile security**. 2. In the **2-step verification** section, turn on the inactive verification method you want to use. 3. In the opened modal, click **Change**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819764.png) 4. Get a verification code using your current method: - **Email:** Click **Send code** and check the email address linked to your profile. - **Authenticator app:** Open your authenticator app and find the current code. 5. Enter the code in Kommo and click **Confirm**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276819779.png) 6. Set up your new verification method: To switch to email verification: 1. Click **Send code**. 2. Enter the code sent to the email address linked to your profile. 3. Click **Confirm**. 4. Copy the new backup codes and save them in a secure location. To switch to authenticator app verification: 1. Open your authenticator app and scan the **QR code** shown in Kommo. 2. Enter the temporary code generated by the authenticator app. 3. Click **Confirm**. 4. Copy the new backup codes and save them in a secure location. If you can’t scan the QR code, click **Can’t scan the QR code?**, copy the setup key, and enter it manually in your authenticator app. Then enter the generated code in Kommo and click **Confirm**. After you change the method, Kommo generates new backup codes. Your previous backup codes no longer work. ## Disable two-step verification How you turn off two-step verification depends on the method you use. ### Disable email verification 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn off **Email** verification. 3. To verify your identity, click **Send code**. Kommo will send a verification code to the email address linked to your profile. 4. Enter the code and click **Disable**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276823062.png) If you can’t access your email: 1. Click **Send code**. 2. In the code field, enter one of the backup codes you saved when you enabled two-step verification — instead of the code sent to your email. 3. Click **Disable**. ### Disable authenticator app verification 1. Go to **Settings → Security → Profile security**. 2. Find the **2-step verification** section and turn off **Authenticator app** verification. 3. To verify your identity, open your authenticator app and enter the current verification code. 4. Click **Disable**. ![](https://cdn.document360.io/56933ead-06fc-4574-95de-8fa458a5db1d/Images/Documentation/base64-converted-image-1793276823144.png) If you can’t access your authenticator app: 1. Click **Can’t use the app?** 2. Enter one of the backup codes you saved when you enabled two-step verification. 3. Click **Disable**. ### After you disable two-step verification - You’ll receive a confirmation email. - Existing backup codes become invalid. - Email or authenticator app verification will no longer be required when you log in. ## Related - [Manage workspace settings](/manage-workspace-settings.md) - [Edit your profile information in Kommo](/edit-profile-information.md) - [Change your Kommo interface language](/change-your-language.md)