Manage your account and security
Manage an authenticator
Set up or replace the authenticator app that protects your alterac.ai sign-in.
An authenticator app provides the six-digit code required after your password. It protects your account if someone learns your password, and it is required before you can use the app.
During first-time login, scan the QR code with your authenticator app and enter its six-digit code. If scanning is unavailable, enter the manual setup key in the app instead. The key is the same secret as the QR code, so do not copy it into chat, email, or an untrusted app.
After verification, save the recovery codes before continuing. See Create an account for the complete first-time flow.
When you still have your current authenticator or a recovery code:
- Open Account settings and select Replace authenticator.
- Confirm your current password and either a current authenticator code or a recovery code.
- Scan the new QR code, or use its private manual setup key.
- Enter the new authenticator code to finish.
- Save the new recovery codes. They replace the old set.
Your existing authenticator remains active until the new code is verified. If you no longer have the current authenticator, use a saved recovery code to sign in first. If neither is available, see Fix account access.
Ask your alterac.ai operator to have a platform administrator start authenticator recovery for your account. The administrator can see only non-secret account and two-factor status; they never receive your password, authenticator setup key, codes, or recovery-link token.
Starting recovery immediately revokes existing browser sessions and CLI credentials. alterac.ai sends the verified account email a single-use recovery link and a separate security notification. Open the link within 30 minutes, confirm your current password, scan the new QR code, and enter its six-digit code. Save the new recovery codes before returning to login.
The previous authenticator continues working until recovery completes. If you regain it first, sign in normally and select Cancel recovery in Account settings. Cancelling invalidates the emailed link and any replacement setup already started from it.
