Two-factor authentication

Two-factor authentication (2FA) adds a second verification step at sign-in: after your password, Dive asks for a 6-digit code from your authenticator app. Even if someone knows your password, they can’t sign in without the code on your phone.

Why turn 2FA on

• Your account becomes much harder to compromise from a stolen password.
• It only adds about five seconds to your normal login.
• The codes refresh every 30 seconds in your authenticator app; there’s nothing to copy from email or SMS.

Enabling 2FA

You’ll need an authenticator app (Google Authenticator, Authy, 1Password, or any TOTP-compatible app).

1. Open Settings > Two-Factor Auth.

2. Click Enable 2FA. Dive displays a QR code and a secret key.

3. In your authenticator app, add a new account and scan the QR code. Can’t scan? Type the secret key manually.

4. Your app now shows a rotating 6-digit code for Dive. Enter the current code in the Dive screen and click Activate.

5. 2FA is on. Save somewhere safe the recovery information your authenticator app provides — losing access to the app without it can lock you out.

Tip

Most authenticator apps offer cloud backup or transfer to a new device. Turn that on so swapping phones doesn’t lock you out of Dive (or any other 2FA account).

Signing in with 2FA on

After entering your email and password, Dive shows a code-entry screen. Open your authenticator app, find the Dive entry, and type the current 6-digit code. You’re in.

Disabling 2FA

1. Open Settings > Two-Factor Auth.

2. Click Disable 2FA.

3. Enter your password to confirm and submit.

Caution

Turning 2FA off removes a real layer of security. Only disable it if you intend to re-enable it immediately on a new device — and remove the old entry from your authenticator app.

Lost access to your authenticator?

If you no longer have the authenticator app and didn’t keep a recovery method, contact Dive support to reset 2FA on your account.