Manage your account and security
Manage an authenticator
Set up or replace the authenticator app that protects your alterac.ai sign-in.
An authenticator app provides the six-digit code required after your password. It protects your account if someone learns your password, and it is required before you can use the app.
During first-time login, scan the QR code with your authenticator app and enter its six-digit code. If scanning is unavailable, enter the manual setup key in the app instead. The key is the same secret as the QR code, so do not copy it into chat, email, or an untrusted app.
After verification, save the recovery codes before continuing. See Create an account for the complete first-time flow.
Setup and replacement show a large QR code within the dark setup card, including administrator-assisted recovery. On a smaller screen, scroll to reach Enter setup key manually and the code-entry controls below the QR code.
When you still have your current authenticator or a recovery code:
- Open Account settings and select Replace authenticator.
- Confirm your current password and either a current authenticator code or a recovery code.
- Scan the new QR code, or use its private manual setup key.
- Enter the new authenticator code to finish.
- Save the new recovery codes. They replace the old set.
Your existing authenticator remains active until the new code is verified. If you no longer have the current authenticator, use a saved recovery code to sign in first. If neither is available, see Fix account access.
After successful replacement, the browser session where you verified the new authenticator stays signed in. Other browser sessions and CLI credentials must sign in again using the new authenticator or a valid recovery code.
Ask your alterac.ai operator to have a platform administrator start authenticator recovery for your account. The administrator can see only non-secret account and two-factor status; they never receive your password, authenticator setup key, codes, or recovery-link token.
Starting recovery immediately revokes existing browser sessions and CLI credentials. alterac.ai sends the verified account email a single-use recovery link and a separate security notification. Keep the link private because it proves access to your verified email. Open it within 30 minutes, confirm your current password, scan the new QR code, and enter its six-digit code. Save the new recovery codes before returning to login.
Two-factor authentication stays required throughout recovery. Completion activates only the new authenticator and recovery-code set; the previous authenticator, previous recovery codes, recovery link, and other signed-in credentials no longer work.
The previous authenticator continues working until recovery completes. If you regain it first, sign in normally and select Cancel recovery in Account settings. Cancelling invalidates the emailed link and any replacement setup already started from it.