Two-factor authentication (2FA)

Two-factor authentication (2FA) adds a second step when you sign in: after your password (or social login), you enter a short code from an authenticator app on your phone. Even if someone learns your password, they can't get in without your device. Manage it under Profile → Security.

What you need

• An authenticator app on your phone or computer — e.g. Google Authenticator, Microsoft Authenticator, Authy, or a password manager like 1Password or Bitwarden.
• Waypoint uses standard TOTP(time-based one-time passwords), so any of these apps work — you don't need a specific one.

Turn on 2FA

1. Go to Profile → Security and, under Two-factor authentication, choose Enable 2FA.
2. Your authenticator app: add a new account by scanning the QR codeshown, or by typing the setup keyunderneath it if you can't scan.
3. The app now shows a 6-digit code that changes every 30 seconds. Type the current code into Verify & enable.
4. That's it — 2FA is on. From now on you'll enter a code each time you sign in.

Signing in with 2FA on

Sign in with your email and password (or a social login) as usual. Waypoint then asks for your 6-digit code. Enter the current code from your authenticator app to finish. You can't reach the rest of the app until you complete this step — it applies on every device and browser, every time you sign in.

Turn off 2FA

On Profile → Security, select Turn offunder Two-factor authentication. You'll need to be signed in (which means you've already passed 2FA), so keep it on unless you have a reason to remove it.

Good to know

• 2FA protects sign-in. It doesn't change how your profile privacy or messaging work — see Privacy controls for those.
• Only you can enable or remove 2FA on your account, and only from a signed-in session.
• You can attach one authenticator today; passkeys and backup codes are planned additions.