Enabling Two-Factor Authentication (2FA) Print

Two-Factor Authentication (2FA) — TOTP

2FA adds a critical layer of security to your WebTic account. Even if your password is compromised, an attacker cannot access your account without the temporary code.

How TOTP works (RFC 6238)

TOTP (Time-based One-Time Password) generates a 6-digit code renewed every 30 seconds, based on:

1. A shared secret key (set up during activation)
2. The current Unix time divided into 30-second windows
3. An HMAC-SHA1 hash truncated to the last 6 digits

No internet connection is required — the code is calculated locally by your app.

Recommended authenticator apps

Enabling 2FA on your WebTic account

1. Log in → My Account → Security → Two-Factor Authentication
2. Click "Enable 2FA"
3. Scan the QR code with your authenticator app
4. Enter the 6-digit code displayed to confirm the setup
5. Download and keep your backup codes (see below)

Backup codes — Critical

During activation, 10 single-use backup codes are generated:

Example:
3M4N-92X5   7K2L-QR9T   8P5V-W3J2
4X9M-L6N8   2R7P-TN5Q   9J6W-VC3X
...

• Each code can be used only once
• Store them in a password manager (Bitwarden, 1Password) — not in your emails
• Regenerate them if you have used several

Recovery procedures

• Lost device: Use a backup code → re-enable 2FA on the new device
• No backup codes left: Contact WebTic support with an ID document for manual identity verification
• Clock drift: Sync the time on your smartphone (settings → Date/Time → Automatic)

Best practices

• Set up 2FA on two devices simultaneously (primary + backup)
• Use Authy for encrypted cloud backup of tokens
• Never share your 2FA code, even with WebTic support