Two-Factor Authentication
Set up 2FA with a standard authenticator app or the dedicated Mersal Authenticator app.
Two-factor authentication adds a second check beyond your password when signing in, so a leaked or guessed password alone isn't enough to access your account. Mersal supports two ways to set it up.
Option 1: A standard TOTP authenticator app
If you already use an authenticator app — any app that generates standard TOTP (time-based one-time password) codes — you can link it to your Mersal account the usual way: scan the setup QR code from your account's security settings, and the app starts generating 6-digit codes that refresh every 30 seconds. From then on, signing in asks for the current code from your app in addition to your password.
This is the right choice if you already have an authenticator app set up for other services and want to keep everything in one place.
Option 2: The Mersal Authenticator app
Mersal also has its own dedicated authenticator app, which supports two ways of confirming a sign-in:
- Offline 6-digit codes — works exactly like a standard TOTP app, generating a rotating code you enter at login. This works without an internet connection on the device running the app.
- Online "approve sign-in" — a push-style flow: when you sign in on the web, the app shows a prompt to approve or deny that sign-in attempt directly, without you needing to type a code at all.
See Mersal Authenticator App for setup and how the approve-sign-in flow works in more detail.
Not sure which option to pick? If you want the simplest possible flow with no typing, the Mersal Authenticator app's approve-sign-in mode is the fastest day-to-day experience. If you'd rather keep all your 2FA codes in one authenticator app you already use, a standard TOTP app works just as well.
Who should enable this
Enable 2FA if your account touches billing or API keys
Any account with access to billing, plan changes, or API keys capable of sending messages at volume should have 2FA enabled. A compromised password on an account like that doesn't just expose data — it can be used to spend your sending credits or change your subscription.
Next steps
- Mersal Authenticator App — full setup and usage details for the dedicated app.
- Platform Security Overview — how 2FA fits into the rest of Mersal's account protections.