MFA, authenticator apps and passkeys

Multi-factor authentication, or MFA, adds an identity check when you sign in to protect your account and your clients’ financial information. AccountFUN calls it Two-Factor Authentication, or 2FA.

You sign in as usual, then confirm it is you with a code from an authenticator app or a passkey. Someone who learns your password still needs that extra check.

Looking at the MFA screen right now?

Match what you see to the next step below.

What you see	What to do
Set Up Authenticator App or Add Passkey	You need to set up a method. Follow authenticator setup or passkey setup.
A QR code and a 6-digit code box	Open an authenticator app on your phone, add an account, and scan the QR code. Enter the code the app generates, then click Verify & enable. Full steps below.
Enter the 6-digit code from your authenticator app	Setup has already been completed. Open the app you used then, find your AccountFUN entry, and enter its current code. Installing a new app alone will not restore that entry.
Use Passkey	Click it and follow the device or password manager prompt for the passkey you previously saved.
Confirm it’s you to make changes and Verify Now	Verify with an existing method before changing your security settings.
A locked session after being away	Use your authenticator app or passkey to unlock it. Remembering a device does not skip this check.

Not sure which method to choose?

If your workplace has an approved authenticator app, use that. Otherwise, Google Authenticator or Microsoft Authenticator on your phone is a practical starting point. Keep AccountFUN open on your computer while you scan its setup QR code with the phone.

If you already use passkeys on your device or in a password manager, you can choose Add Passkey instead, when offered. You do not need to set up both methods to begin.

What the terms mean

Term	Meaning
Authenticator app	An app that produces short verification codes. It can hold separate entries for AccountFUN and other services.
TOTP	Time-based one-time password. This is the changing six-digit code in your authenticator app.
Passkey	A credential saved on a device, in a password manager, or on a physical security key. You approve its use with a fingerprint, face recognition, or a PIN, depending on your setup.
Setup QR code or manual secret	The information that connects your authenticator app to AccountFUN during setup. Keep it private.
Recovery code	An emergency code you save during setup, in case you lose access to your normal method. It works differently from the changing authenticator code.

Your role may require MFA because it gives access to sensitive financial data. If AccountFUN says setup is required to continue, complete one of the setup methods below. Each person sets up their own account, including accountants working across several organizations.

Set up an authenticator app

Choose an app

These are examples of available options. Follow your workplace’s policy, and install from the vendor’s official links or your device’s app store. Check the publisher before installing.

Option	Where to start
Google Authenticator	A dedicated code app for Android and iPhone. See Google’s installation, setup, and transfer instructions.
Microsoft Authenticator	Can hold AccountFUN alongside other accounts. Use Other account, rather than the Microsoft work or school account setup. See Microsoft’s account setup instructions.
Apple Passwords	Can store verification codes as well as passwords and passkeys on supported Apple devices. See Apple’s Passwords guide.

You do not need a separate authenticator app for every client or website. Add an AccountFUN entry to an app you already use, if your workplace allows it. A code for your email or another accounting service will not work for AccountFUN.

Connect the app to AccountFUN

1. Sign in to AccountFUN. If the setup page is already open, stay there. Otherwise, go to Settings → Account → Two-Factor Authentication.
2. Click Set Up Authenticator App. If you already have a passkey, the button is Add Authenticator App. Complete Verify Now first if prompted.
3. Keep the page showing the QR code open.
4. Open your authenticator app on your phone. Choose its option to add an account. In Google Authenticator, use Add → Scan a QR code. In Microsoft Authenticator, use + → Other account → Scan a QR code. Labels can vary by app version.
5. Allow camera access if asked. Point the app’s scanner at the QR code on the AccountFUN page.
6. Find the new AccountFUN entry in your authenticator app. It should show a changing six-digit code.
7. Enter that code in AccountFUN’s 6-digit code box, then click Verify & enable. If the code is about to change, wait for the next one.
8. Save the recovery codes when AccountFUN displays them. Use Download or Copy all, and store them somewhere private that you can access if you lose your phone.
9. Click I’ve Saved Them or I’ve Saved Them, Continue. Setup is complete when Two-Factor Authentication shows Enabled. Use Continue to app if shown.

Scanning the QR code alone does not finish setup. AccountFUN needs the six-digit code to verify that the connection works.

If you are using only one phone

You cannot point your phone’s camera at its own screen. Use the manual setup option instead:

1. On the AccountFUN setup page, find the secret under Or enter this code manually.
2. In your authenticator app, choose manual entry or Enter a setup key.
3. Use AccountFUN and your sign-in email as the account label so you can recognize it later.
4. Enter the manual secret. If the app asks for a code type, choose Time based or TOTP.
5. Return to AccountFUN and enter the six-digit code generated by the authenticator app.
6. Click Verify & enable, then save your recovery codes.

The long manual secret belongs in the authenticator app. The short, changing six-digit code belongs in AccountFUN.

Keep setup information private

Do not send anyone your setup QR code, manual secret, verification codes, or recovery codes. These can give access to your account. If you ask for help with a screenshot, cover those details before sending it.

Set up a passkey

A passkey lets you complete the second check without typing an authenticator code. In AccountFUN, you still begin with your usual sign-in method, then use the passkey when asked.

Choose where to save it

The choices depend on your browser, device, and workplace policy. These are common passkey providers and devices, rather than a guarantee that every combination works.

Option	What to expect
Apple Passwords and iCloud Keychain	Use a supported Apple device and approve with Touch ID, Face ID, or your device’s unlock method. See Apple’s passkey instructions.
Google Password Manager	Chrome or Android may offer to save the passkey in Google Password Manager. See Google’s passkey guide.
Windows Hello	Save a passkey on your Windows device and approve with its PIN, fingerprint, or face recognition. A locally saved Windows Hello passkey stays on that device. See Microsoft’s passkey setup guide.
1Password	Its browser extension can offer to save and use passkeys. See 1Password’s passkey instructions.
A FIDO2 security key, such as a compatible YubiKey	Use a physical key when the browser offers that choice. You may need its PIN and to touch or tap the key. See Yubico’s passkey guide.

You do not need to buy a security key if an available device or password manager meets your needs. Save a passkey only somewhere you control. Avoid shared computer profiles or another person’s password manager.

Add the passkey in AccountFUN

1. Open AccountFUN at app.accountfun.com in a current browser.
2. Go to Settings → Account → Two-Factor Authentication, or stay on the required setup page.
3. If asked, click Verify Now and confirm with an existing method.
4. Under Passkeys, enter a recognizable name, such as Work laptop or Personal iPhone.
5. Click Add Passkey.
6. In the browser or device prompt, choose where to save the passkey. Note which device or password manager you choose.
7. Approve using the requested fingerprint, face recognition, PIN, or security key action. Enter a device PIN only in the device’s own prompt, not in AccountFUN’s six-digit authenticator field.
8. Check that the passkey appears in AccountFUN’s Passkeys list. If this is your first MFA method, save the recovery codes and click I’ve Saved Them or I’ve Saved Them, Continue.

The name in AccountFUN is a label to help you identify the passkey. Naming it Work laptop does not determine where the browser saves it.

If Add Passkey is missing, use the authenticator setup method. If the browser says it cannot create a passkey, open the usual AccountFUN address in a current browser and try again.

Use a passkey on another device

A synced password manager may make your passkey available on your other devices. A device-bound passkey stays on the device where you saved it. Check your provider’s instructions before relying on access from another computer.

A browser may also offer to use a nearby phone, with a QR code and a Bluetooth requirement. Follow that browser prompt. This QR code belongs to the passkey flow; do not add it to your authenticator app.

You can add another passkey from AccountFUN’s Passkeys section. Keep a working method and your recovery codes available before changing devices.

Sign in after setup

1. Sign in to AccountFUN as usual.
2. If asked for a second check, either open your authenticator app and enter the AccountFUN code, or click Use Passkey.
3. For an authenticator code, click Verify. For a passkey, approve the device or password manager prompt.

AccountFUN does not send this authenticator code by email or text message. Open the authenticator app to get it. Authenticator codes can be generated without mobile reception, although AccountFUN needs an internet connection to sign in.

If both methods are set up, use either method offered on the screen.

Remember this device

On a private device you control, you can select Remember this device before completing the sign-in check. AccountFUN can remember that browser for 60 days. Do not select it on a shared or public computer.

You may still need a fresh check to unlock an inactive session or change security settings. Another browser, a private window, or clearing browser data can also require verification again.

Manage remembered devices under Settings → Account. Forgetting a device stops future use of its remembered status. Forget All & Sign Out Other Sessions also signs out your other sessions and disconnects connected apps, such as AI assistants.

Save recovery codes before you need them

AccountFUN displays recovery codes after your first MFA setup. They are not shown again. Keep them in a protected password manager or a secure offline location, with a way to access them if your normal MFA device is unavailable.

To replace your codes, go to Settings → Account → Two-Factor Authentication → Regenerate Recovery Codes. Complete Verify Now if asked. Save the new set and discard the old set, which no longer works.

If you lose your phone or passkey

First try another method you already set up, such as a second passkey or your authenticator app. If you cannot use any of them:

1. Begin signing in to AccountFUN as usual.
2. On the second-factor screen, click Lost your device? Use a recovery code.
3. Enter one of your saved recovery codes.
4. Click Disable 2FA with recovery code.
5. Sign in again after AccountFUN signs you out.
6. Set up MFA again and save the new recovery codes. Your role may require this before you can continue.

Recovery resets your MFA

Using a recovery code removes your authenticator and passkey methods and disables MFA. It also disconnects connected apps, such as AI assistants. Your old recovery-code set is no longer usable. Set up protection again before returning to normal work.

If you have no working method and no recovery codes, contact AccountFUN support through the contact page. Describe the screen and the methods you have lost access to. Do not include passwords, setup secrets, or codes. A password reset alone does not remove the MFA requirement.

Change phones or remove an old method

Before erasing or returning an old device, transfer your authenticator entry using the provider’s instructions, or add another working method in AccountFUN. Confirm that the new device can complete verification, and keep your recovery codes accessible.

To remove an old authenticator or passkey, open Settings → Account → Two-Factor Authentication. Complete Verify Now if prompted, then click Remove beside the old method. Removing your only method turns MFA off and forgets remembered devices. A role that requires MFA will require setup again.

Deleting an app from your phone does not remove its MFA requirement in AccountFUN. Removing a saved passkey from a password manager also does not remove its entry from AccountFUN.

Troubleshoot common problems

Problem	What to try
The six-digit code is rejected	Choose the AccountFUN entry for the email you are signing in with. Wait for a fresh code, then enter all six digits, including a leading zero. Check that the phone’s date and time are set automatically.
There is no AccountFUN entry in the authenticator app	If setting up for the first time, scan the setup QR code or enter the manual secret. If already enrolled, check your old device or the app’s transfer or restore options. A new installation does not by itself recreate the entry.
The QR code will not scan	Use the scanner inside the authenticator app, allow camera access, or use manual entry. On one phone, follow the manual setup steps.
The passkey prompt was cancelled or timed out	Click Use Passkey or Add Passkey again and finish the device prompt.
The passkey cannot be used at this address	Open app.accountfun.com in a current browser. Use an enrolled authenticator or recovery code if needed.
The browser cannot find the passkey	Check the device, browser profile, or password manager where you saved it. Unlock that manager or try the original device.
The passkey is already registered	Use the existing passkey, or choose a different device or provider when adding another.
The settings buttons are disabled	Complete Verify Now with an existing method before making changes.
A recovery code is rejected	Use an unused code from the most recently generated set. Old sets and previously used codes will not work.
I remembered this device but am asked again	Remembered status does not skip idle-session unlocking or security-setting checks. It also depends on the browser retaining its data.

Example: an accountant setting up MFA for the first time

You open AccountFUN on your work computer and see Set Up Authenticator App. You already use Microsoft Authenticator for work.

In Microsoft Authenticator on your phone, add an Other account and scan AccountFUN’s QR code. A new AccountFUN entry displays a six-digit code. Enter it on the computer and click Verify & enable. Save the recovery codes in your approved secure storage, then click I’ve Saved Them, Continue.

Next time AccountFUN asks for a code, open that same AccountFUN entry on your phone. You do not need to scan the setup QR code again.