TOTP Setup
Time-based One-Time Passwords (TOTP) generate a 6-digit code that changes every 30 seconds.
Recommended Apps
Section titled “Recommended Apps”| App | Notes |
|---|---|
| 1Password | Integrated with password manager |
| Authy | Cloud backup, multi-device sync |
| Google Authenticator | Simple, no account required |
| Microsoft Authenticator | Enterprise-friendly |
| App | Notes |
|---|---|
| 1Password | Integrated with password manager |
| Authy | Cloud backup, multi-device sync |
| Google Authenticator | Simple, no account required |
| Aegis | Open source, encrypted backups |
Setup Steps
Section titled “Setup Steps”- Open Account Security in the web UI
- Click Enable MFA (or Add Method if you already have one; adding a method asks you to verify an existing one first)
- Choose Authenticator app
- Scan the QR code with your app
- Enter the 6-digit code to confirm. Check Trust this browser to skip the MFA prompt at sign-in on this browser
- Save the backup codes shown with your first method
Manual Entry
Section titled “Manual Entry”If you can’t scan the QR code:
- Click Copy secret for manual entry
- Add a manual TOTP entry in your app using that secret
Using TOTP
Section titled “Using TOTP”Web UI
Section titled “Web UI”Enter the 6-digit code when prompted for MFA. You can also trust the device to reduce prompts at sign-in.
The CLI asks for the code when a command needs MFA, or you can pass it up front:
rack-gateway deploy -a myapp --mfa-code 123456Each code works once: the gateway refuses a code that has already been used.
Troubleshooting
Section titled “Troubleshooting”- Verify your device time is accurate
- Wait for the next code if a code is near expiry
- Ensure you’re using the correct account in your app