# Two-factor Authentication (2FA) Overview

Two-factor authentication (2FA) adds a second layer of protection to your Cloud Voice App sign-in. Once you turn it on, logging in takes more than your password alone: you also enter a short verification code that proves the sign-in is really you. This page explains the two ways you can receive that code.

## Before you begin

2FA is available once the platform is running a recent enough server version. If the option does not appear in your account, check with your system administrator, who manages platform updates.

:::note
2FA requires the platform server version to be 84.10.0.30 or later. Your system administrator can confirm the running version and apply the upgrade if it is older.
:::

## How 2FA protects your account

With 2FA switched on, every login requires two things:

1. Your account password.
2. A one-time verification code from the method you set up.

Because the code changes each time and comes from a device or inbox only you control, someone who learns your password still cannot get into your account.

## Method 1: Authenticator app

This method uses an authenticator app on your phone to generate verification codes. Any of the following are supported:

- [Google Authenticator](https://support.google.com/accounts/answer/1066447?hl=en)
- [FreeOTP](https://freeotp.github.io/)
- [Twilio Authy](https://authy.com/)
- [Microsoft Authenticator](https://www.microsoft.com/en-us/security/mobile-authenticator-app)

After installing one of these apps, you link your Cloud Voice account to it. From then on the app produces a fresh code on demand, and you enter your password plus that code each time you sign in.

For setup steps, see [Configure Two-Factor Authentication Using Authenticator Application](/pbx/desktop-client-user-guide/configure-two-factor-authentication-using-authenticator-application/).

## Method 2: Email

This method sends the verification code to the same email address you use to log in. At sign-in you enter your password, then the code delivered to your inbox.

For setup steps, see [Configure Two-Factor Authentication Using Email](/pbx/desktop-client-user-guide/configure-two-factor-authentication-using-email/).

:::tip
An authenticator app generates codes on your device even without a network connection, so it stays available if your email is temporarily unreachable.
:::