Two-factor authentication (2FA) protects your Aria Compute account with a rotating six-digit code from an authenticator app. This guide covers enabling 2FA, signing in afterwards, and managing your active sessions.
Enable 2FA
Start the setup
The response contains the TOTP secret and a qr_code_url you can render in your dashboard. Add the account to your authenticator app
Scan the QR code (or paste the secret) into Google Authenticator, 1Password, Authy, or any TOTP-compatible app.
Confirm the code
A successful call activates 2FA on the account.
Sign in with 2FA
After 2FA is enabled, POST /api/auth/login returns a challenge instead of a full session. Verify the code to complete sign-in:
The successful response has the same shape as a normal login: a token plus a user object.
Disable 2FA
Disabling 2FA weakens account security. Only do so when you plan to re-enroll on a new device immediately after.
Manage active sessions
Every sign-in creates a session. Review and revoke them:
If you suspect a device was compromised, revoke other sessions first, then rotate any bfvk- API keys that may have been visible on that device.