Two-Factor Authentication (2FA)

Two-factor authentication (2FA) adds a second step to signing in to your SlyReply account. After your password, you also enter a short code from an authenticator app on your phone. Even if someone learns your password, they can't get into your account without that code.

2FA protects the dashboard login — the website where you manage your account, agents, and billing. It doesn't change how you email your agents; that flow is still authenticated by your sender address as usual.

Enabling 2FA

You set up 2FA from your account settings page:

Go to Profile → Account and find the Two-Factor Authentication section.
Click Enable. SlyReply shows a QR code and a secret key.
Open an authenticator app — Google Authenticator, Microsoft Authenticator, Authy, 1Password, or any TOTP app — and add a new account by scanning the QR code. If your app can't scan, type the secret key in by hand instead.
Your authenticator app now shows a 6-digit code that changes every 30 seconds. Enter the current code back on the settings page to confirm everything lines up.

Once you enter a valid code, 2FA is active. From then on, every dashboard sign-in asks for your password and then a current 6-digit code from your authenticator app.

Your one-time recovery codes

When you enable 2FA, SlyReply shows you a set of one-time recovery codes. These are a backup way to get past the 2FA step at login if you don't have your phone handy — each code works once.

Important: these codes are shown once, at setup. SlyReply stores them in a hashed form and cannot show them to you again, so save them somewhere safe right away — a password manager is ideal. Treat them like a spare key.

If you still have your authenticator app but have used up or misplaced your recovery codes, you can mint a fresh batch from the same Profile → Account section — generating new codes replaces the old set, and your authenticator app keeps working.

Disabling 2FA

To turn 2FA off, go to Profile → Account and choose to disable it. For your protection this asks for both your current password and a current code from your authenticator app — your password alone can't switch 2FA off, which is the whole point of having it.

If you lose your authenticator

Lost your phone, and don't have a recovery code either? You can still get back in, using the email-link recovery flow:

On the 2FA code screen at login, click the "Can't sign in?" (recovery) link.
Enter the email address on your account. If that address has an account with 2FA enabled, SlyReply emails you a one-time recovery link.
Open the link from your inbox. It turns 2FA off on your account. The link expires after 30 minutes and works only once.
Sign in with just your password. We strongly recommend re-enabling 2FA right away and saving the new recovery codes.

This works because your registered email is already your identity for SlyReply. For security, using the recovery link signs you out of any active sessions, so you'll log in fresh.

There is no "view my old codes again" screen and no way to recover a lost authenticator without either a saved recovery code or the email-link flow above — so do keep those recovery codes somewhere safe when you first set 2FA up.

Tips

Save your recovery codes at setup — they're the easy way back in, and you only see them once.
Use an authenticator app you trust and back up — apps like Authy or 1Password sync across devices, so a lost phone doesn't lock you out.
Keep your registered email secure — it's the last-resort recovery path, so protect that inbox too.