Open Account security
Sign in and open Account Settings → Account security. Enter your current password for security operations. Keep this browser session open until setup is complete.
Enroll the authenticator
Begin setup and scan the QR code locally with your authenticator, or enter the manual secret. Never send or screenshot a real setup secret. Enter a current six-digit code to confirm before enrollment expires.
Save recovery codes
Store the one-time recovery codes in a protected place reachable without your phone. Each code works once. Do not store the only copy in an unprotected photo on the same device.
Test a new sign-in
Open a fresh sign-in and complete its MFA step. Security changes revoke older sessions and developer credentials. Reconnect necessary integrations using new scoped credentials.
What success looks like
A new password, magic-link or connected-provider sign-in requires the second factor before an account session is issued.
If it does not work
Check device time if a current code fails. Distributed attempt limits apply. Password reset does not disable MFA; if both authenticator and recovery codes are lost, contact support for separately verified recovery.
Contact CamBackup support with safe error text, time/timezone and the steps tried. Never send passwords, tokens, OTPs, recovery codes or credential-bearing camera addresses.