Two-Factor Sign-In

Updated September 28, 2026

Two-factor sign-in protects your studio even if someone learns your password. On top of the password, Slotsy asks for a 6-digit code from an authenticator app on your phone. The code changes every 30 seconds, so a password that was seen or stolen does not open your payments, customers or team on its own.

How to turn it on

  1. Install an authenticator app on your phone if you have none: Google Authenticator, Microsoft Authenticator, 1Password or Authy
  2. In the admin panel open Account and find the Two-factor sign-in card
  3. Click Turn on
  4. Scan the QR code with the app (or type the key under it by hand)
  5. Enter the 6-digit code the app shows and click Turn on
  6. Save your recovery codes: they are shown only once

An email "Two-factor sign-in is on" confirms it.

Signing in from now on

WhereWhat happens
Web admin panelEmail and password → the code from the app. Tick "Trust this browser for 30 days" to skip the code on your own computer
Slotsy Business appEmail and password → the code from the app. The phone then stays signed in for up to 90 days
A new device or someone else's browserThe code is always asked for

Tip: Recovery codes are for a lost or dead phone. At the code step, click "Use a recovery code" and enter one. Each works once. Keep them in a password manager or on paper, away from the phone.

Recovery codes and turning it off

ActionHow
New recovery codesAccount → Two-factor sign-in → New recovery codes, confirm with the password. The old ones stop working
Turn offTurn off, confirm with the password. An email "Two-factor sign-in was turned off" follows

Resetting the password with "Forgot password?" does not turn two-factor off: the code is still asked for afterwards.

If something goes wrong

  • "That code is not right" — make sure the phone sets its time automatically, and enter a fresh code.
  • "Too slow or too many tries" — the code step allows 5 minutes and 5 tries. Sign in again with the password.
  • Phone lost and no recovery codes — write to [email protected] from your account's email.
  • An email about turning it off that you did not do — change your password at once and write to us.

Related