Skip to main content

Enable two-factor authentication (2FA)

Two-factor authentication (2FA) is an extra layer of security for your Plausible Analytics account designed to ensure that you're the only one who can access your account even if your password gets stolen. With 2FA enabled, when you log in to your Plausible account on a new device for the first time, you need both your account password and the verification code that's displayed on your trusted devices.

To enable the 2FA on your Plausible account, you are required to insert the security code provided by your authenticator app. 
There are numerous third-party authenticator apps available including Ente (Android and iOS), some operating systems offer built-in options and many password managers including Bitwarden also support 2FA functionality.

How to enable 2FA​

  • Log in to your Plausible Analytics account and in the top right menu, click on your account name and choose "Account Settings" to enter your account settings.
  • In the "Security" section, find “Two-Factor Authentication (2FA)” and click on the “Enable 2FA” button.
Enable 2FA
  • Link your Plausible account to your authenticator app by scanning the QR code or pasting the code manually. Then click on the “Proceed” button.
Scan QR to enable 2FA
  • Enter the verification code from your authenticator application and click on the “Verify” button.
Enter verification code to enable 2FA
  • Store the recovery codes somewhere safe. You can log in to your Plausible account with a recovery code if you lose access to your authenticator application or your trusted device. Then click on the “Finish” button to complete the 2FA setup.
Save 2FA recovery codes

How to generate new recovery codes​

Have you lost your recovery codes? You can generate new codes at any time. You can use a recovery code to log in to your Plausible account if you lose access to your authenticator app or your trusted device.

  • In your Plausible account settings "Security" section, find “Two-Factor Authentication (2FA)” and click the “Generate new” link.
Generate new 2FA recovery codes
  • Confirm your account password and click the “Generate New Codes” button.
Generate new 2FA recovery codes
  • Store your new recovery codes somewhere safe and click the “Finish” button to complete the process.

Note that when you generate new recovery codes, your old recovery codes will become invalid.

How to disable 2FA​

  • In your Plausible account settings "Security" section, find “Two-Factor Authentication (2FA)” and click on the “Disable 2FA” button.
Disable 2FA
  • Then enter your account password and click the “Disable 2FA” button to complete the process.

Note that once you turn off the 2FA, verification codes from the authenticator application and saved recovery codes will become invalid.

Lost or stolen trusted device?​

If you lose your trusted device or otherwise can’t get codes from your authenticator app, you can use recovery codes you previously saved to sign in to your Plausible account.

Plausible Analytics also offers a security feature that allows you to remotely log out of your account on other devices via your account settings. Here's how.