Skip to main content
Two-factor authentication (2FA) protects your Aria Compute account with a rotating six-digit code from an authenticator app. This guide covers enabling 2FA, signing in afterwards, and managing your active sessions.

Enable 2FA

1

Start the setup

The response contains the TOTP secret and a qr_code_url you can render in your dashboard.
2

Add the account to your authenticator app

Scan the QR code (or paste the secret) into Google Authenticator, 1Password, Authy, or any TOTP-compatible app.
3

Confirm the code

A successful call activates 2FA on the account.

Sign in with 2FA

After 2FA is enabled, POST /api/auth/login returns a challenge instead of a full session. Verify the code to complete sign-in:
The successful response has the same shape as a normal login: a token plus a user object.

Disable 2FA

Disabling 2FA weakens account security. Only do so when you plan to re-enroll on a new device immediately after.

Manage active sessions

Every sign-in creates a session. Review and revoke them:
If you suspect a device was compromised, revoke other sessions first, then rotate any bfvk- API keys that may have been visible on that device.