Two-Factor Authentication

Where to find: User menu (top right) → Security Who it's for: Anyone who wants to make their account more secure In short: Adds a second security layer to your account with an app on your phone; at sign-in, a 6-digit code is asked for alongside your password.

---

What does it do?

When two-factor authentication is on, signing in to your account requires two things:

1. Your password (something you know)
2. The 6-digit code produced by the app on your phone (something only you have)

Thanks to this second step, even if your password ends up in someone else's hands, they cannot sign in without your phone.

What is an "authenticator app"?

An authenticator app is a free app that runs on your phone and produces 6-digit codes that refresh every 30 seconds. The best-known ones are:

• Google Authenticator
• Authy
• 1Password (and similar password managers)

Before you start, install one of these from your phone's app store.

---

Turning on two-factor authentication (step by step)

1. Open the Security page (see Where to find above). On the page you'll see the Two-Factor Authentication card (İki Adımlı Doğrulama) with an Off label (Kapalı).
2. Click Set up two-factor authentication (İki adımlı doğrulamayı kur).
3. A square code (QR code) appears on screen. Open the authenticator app on your phone, use its "add code / scan" option, and scan this square code with your camera.
   • If you can't scan with the camera, you can add it by typing the Setup key (Kurulum anahtarı) — the long string of letters and numbers below the code — into the app by hand.
4. The app starts showing a 6-digit code for your account. Enter that code in the Verification code box (Doğrulama kodu) on the Security page.
5. Click Enable (Etkinleştir).
   • If the code is wrong, the warning "Kod doğrulanamadı. Lütfen tekrar deneyin." ("Could not verify the code. Please try again.") appears. Enter the current code from the app again (codes change every 30 seconds).
6. Once verification succeeds, your backup codes are shown on screen. Be sure to save these codes (see the warning below). Save them with Copy (Kopyala) or Download (İndir), then click I've saved the codes, continue (Kodları sakladım, devam et).

The card's label now shows On (Etkin). Two-factor authentication is active.

---

Be sure to save your backup codes

When you finish setup, you're given a set of backup codes (recovery codes). These are one-time codes that let you into your account when you can't reach your phone (lost, broken, or the app deleted).

• Each code works only once. Once you use a code, it becomes invalid.
• Store these codes somewhere safe. Apart from the moment they're shown on screen, they are never shown again as a full list.
• If you lose both your phone and your backup codes, you cannot get into your account. You'd be locked out — so keep the codes somewhere safe but reachable (for example, a password manager or a locked note).

The Copy (Kopyala) button copies the codes to your clipboard; the Download (İndir) button downloads a text file named treyza-yedek-kodlar.txt to your computer.

---

How signing in works afterward

With two-factor authentication on, the next time you sign in:

1. You enter your email and password as usual.
2. The system then asks for the 6-digit verification code.
3. You open the authenticator app on your phone and type the current code shown for your account.
4. Sign-in completes.

When your phone isn't with you, you can also sign in by entering one of your backup codes on the code screen (that code can't be used again).

---

Regenerating backup codes

When your backup codes run low (the Security page shows a Backup codes remaining count — Kalan yedek kod) or you suspect your codes' safety, you can produce a new set:

1. On the Security page, click Regenerate backup codes (Yedek kodları yenile).
2. To confirm it's you, enter the current code from your authenticator app or one of your existing backup codes.
3. Click Regenerate (Yenile).
4. The new codes are shown on screen; save them too with Copy / Download.

---

Turning off two-factor authentication

If you want to remove the protection:

1. On the Security page, click Turn off two-factor authentication (İki adımlı doğrulamayı kapat).
2. In the confirmation window that opens, enter the current code from your authenticator app or one of your backup codes.
3. Click Turn off (Kapat).

The card shows Off (Kapalı) again.

---

Frequently asked questions

I changed my phone, what should I do? Install the authenticator app on your new phone. The cleanest way: while you still have your old phone, turn off two-factor authentication and turn it back on on the new phone. If you can't reach the old phone, sign in on the code screen with one of your backup codes and set it up again.

I keep entering the code wrong and it won't accept it. Codes change every 30 seconds. Enter the most current code from the app before it expires. Also make sure your phone's clock is set automatically/correctly; a clock that's off can cause codes to fail.

I lost my backup codes but still have my phone. No problem: produce a new set from the Security page with Regenerate backup codes. The old list becomes invalid.

I lost both my phone and my backup codes. In that case you can't get into your account yourself. You'll need to contact the Treyza support team for help. Keeping your backup codes somewhere safe is exactly why this matters so much.