---
title: "Secure your Exoscale console with two-step verification"
description: "Secure your Exoscale console with two-step verification"
date: 2015-01-22
url: https://www.exoscale.com/blog/two-step-verification/
---
# Secure your Exoscale console with two-step verification

![two-step verification cover](https://www.exoscale.com/blog/two-step-verification/cover.png)

Exoscale customers care a lot about security. So do we, and we're happy to add
one more layer of security when accessing the Exoscale web console: two-step
verification.

Two-step verification tightens login attempts by requiring a secure code in
addition to your account password. This combines the security of *something you
know* (your password) with *something you have* (your secure code, periodically
generated by an authenticator app on your mobile device).

To get started, simply go to the "Password and security" section in your
account details. Follow the wizard that prompts you for your account password
and gives you the barcode to scan with your authenticator app:

![barcode](https://www.exoscale.com/blog/two-step-verification/wizard.png)

Once your authenticator is set up, we'll give you backup codes to use when you
lose your mobile device. It is **crucial** to keep these codes in a safe and
secure place as they are the only way to regain access to your account if you
lose access to your authenticator app.

![backup codes](https://www.exoscale.com/blog/two-step-verification/backup-codes.png)

Once the setup is done, login forms will prompt your for the secure code
generated by the authenticator app:

![login prompt](https://www.exoscale.com/blog/two-step-verification/login.png)

Organization owners also see a warning sign next to members who don't have
two-step verification enabled:

![organization](https://www.exoscale.com/blog/two-step-verification/organization.png)