Two-Factor Authentication (2FA) adds an extra layer of security to your AEvent account—requiring a code from your mobile device in addition to your password when logging in.
🧭 Step 1: Make Sure You’re Set to “Expert”
2FA settings are only available to users with Expert-level access.
To check or change your user level:
Go to Account Settings
Ensure your User Level is set to Expert
If you're not on Expert, you won’t see the Security tab.
🔧 Step 2: Navigate to the Security Settings
Go to Settings > Security
Click “Setup” under the Two-Factor Authentication section
📲 Step 3: Scan the QR Code
You’ll be shown a QR code to scan with an authenticator app (like Google Authenticator or Authy).
Once scanned, enter the code from the app to confirm.
⏳ Step 4: Choose When 2FA Expires
After setup, you’ll be prompted to choose how long 2FA should stay valid.
🛑 Important Note About "Never" Expiring:
If you choose Never, 2FA will remain active only for the current session—until you log out.
Why? Because logging out destroys your session.
If 2FA stayed valid forever—even after logout—it would allow someone using the same device (say, at a public library or shared computer) to bypass 2FA just by knowing your password.
So even if you choose Never, you will be prompted for 2FA again the next time you log in. That’s by design, not a bug—it’s what keeps your account safe.
🔁 Reset or Disable 2FA
Once 2FA is set up, you’ll also see options to:
Reset (e.g., if switching to a new phone)
Disable 2FA entirely (not recommended unless absolutely necessary)
