Turn on two-factor authentication
Protect your Pengo login with a 6-digit code from an authenticator app, change your password, and learn what happens when you sign in with 2FA on.
Two-factor authentication (2FA) adds a second step to your login. However you sign in (password, magic link, Google or SSO), Pengo then asks for a 6-digit code from an authenticator app on your phone. Someone who learns your password still can’t get in without that code.
2FA is personal: it protects your login, not the whole workspace. Each teammate turns it on for themselves.
#Turn on 2FA
-
Go to Settings Your profile Password & 2FA .
-
Under Two-factor authentication, click Enable 2FA.
-
Scan the QR code with your authenticator app.
If you can’t scan it, type the key shown under Or enter this key manually into the app instead.
-
Enter the 6-digit code your app shows under 2. Enter the 6-digit code, then click Confirm & enable.
When it’s on, the section shows Authenticator app is protecting your account with an Active label.
#Sign in with 2FA on
-
Sign in as usual: with your email and password, a magic link, Google or SSO.
-
On the Two-step verification screen, enter the 6-digit code from your authenticator app under Authentication code.
-
Click Verify and sign in.
Until you enter the code, Pengo keeps you on this screen: the dashboard, the API and the mobile apps stay locked. Codes expire quickly, so use the one your app shows right now. To go back to the sign-in form, click Back to sign in.
#Turn off 2FA
In Settings Your profile Password & 2FA , click Disable 2FA and confirm. Your account is then protected by your password only.
#Change your password
The Password section on the same page changes the password you sign in with.
-
Enter your Current password.
-
Enter a New password of at least 8 characters, and type it again under Confirm password.
A meter rates it Weak, Fair, Good or Strong. Longer passwords with a mix of upper and lower case, numbers and symbols score higher. The new password must be different from your current one.
-
Click Update password.
If you’ve forgotten your password, sign out and click Forgot password? on the sign-in page.
Common questions
Which authenticator apps work with Pengo?
Any app that makes time-based 6-digit codes, such as Google Authenticator, Authy or 1Password. Scan the QR code Pengo shows, or type in the key below it.
Can I make 2FA required for my whole team?
No. Each person turns 2FA on for their own login in Settings › Your profile › Password & 2FA. There's no workspace setting that forces it.
Does Pengo give me backup codes?
No. Keep your authenticator app backed up, or keep the setup key somewhere safe, before you rely on 2FA. If you lose access, contact support@pengo.chat.
Was this guide helpful?
Your answer helps us improve it.
Sorry about that. or contact support, and we'll fix the guide.