Knowledge Base

Find detailed guides, step-by-step tutorials, and FAQs to help you get the most from your DartNode services.

home two-factor-auth getting-started

Two-Factor Authentication (2FA): Setup, Recovery Codes, and Lockouts

Your DartNode account can deploy, rebuild, and destroy servers, and it holds your billing details. Two-factor authentication (2FA) means a stolen password alone isn't enough to get in. Setup takes about two minutes, and this guide covers everything else you'll need: choosing a method, logging in, recovery codes, and what to do if you lose your device.


Choosing a 2FA method

DartNode supports three methods. Pick the strongest one you'll actually keep using.

MethodHow it worksStrengthsWatch out for
Authenticator app (recommended)An app such as Google Authenticator, Authy, Microsoft Authenticator, or 1Password generates a new 6-digit code every 30 seconds.Works offline. Can't be intercepted in transit. Not affected by SIM-swap attacks.If you replace your phone, move your codes to the new one first.
SMSA 6-digit code is texted to your verified phone number. A voice call is available as a fallback.Nothing to install.Vulnerable to SIM swapping. Delivery can be slow when you're traveling.
EmailA code is sent to your account email address.Easiest to set up.Weakest option. If someone gets into your email, they get both your password reset and your 2FA code.

Turning on 2FA

  1. Open Settings from the user menu in the top-right corner.
  2. In the Two-Factor Authentication section, click Change Method or follow the setup prompt.
  3. Choose Authenticator App, SMS, or Email, and click Continue.
  4. Complete the step for your method:
    • Authenticator App: Scan the QR code with your app, or type in the secret key manually. Enter the 6-digit code the app shows.
    • SMS: Enter your phone number and click Send Code, then enter the code you receive. SMS requires a verified phone number.
    • Email: Enter the code sent to your inbox.
  5. Click Verify & Enable.
  6. Save your 8 recovery codes (see below), then click I've Saved These Codes.

Admin accounts are required to use 2FA and can't skip setup.


Recovery codes: your backup key

When you enable 2FA, DartNode generates 8 one-time recovery codes in the format XXXX-XXXX. If you lose your phone or can't receive a code, a recovery code gets you in. They are the most important part of setup, so don't skip saving them.

  • Store them somewhere other than your phone. A password manager, a printed copy in a safe place, or an encrypted file all work. Codes saved only on the same phone as your authenticator app won't help if you lose that phone.
  • Each code works once. After you use one, it's gone.
  • Running low? Generate a new set. Go to Settings, and in the Two-Factor Authentication section click Regenerate Recovery Codes. This immediately invalidates every old code, including unused ones, so save the new set right away.

Logging in with 2FA

  1. Enter your email and password as usual.
  2. When prompted, enter the code from your authenticator app, text message, or email.
  3. Optionally, check Remember this device for 30 days to skip the code on that browser. Only do this on computers you own, never on shared or public machines.
  4. Click Verify.

Code didn't arrive? Click Resend Code for email or SMS, or Call Me Instead to get the SMS code by voice. For email codes, check your spam folder. If authenticator app codes are rejected, your phone's clock is probably out of sync. Turn on automatic date and time in your phone's settings.

Using a recovery code to log in

  1. On the 2FA verification page, click Use a Recovery Code.
  2. Enter one of your saved codes (XXXX-XXXX).
  3. Click Verify Recovery Code.

Once you're in, set up 2FA again on your new device and regenerate your recovery codes.


Lost your device and your recovery codes?

Contact support. To protect your servers, we won't remove 2FA on the strength of a request alone. You'll need to prove you own the account before staff reset it. Expect this to take longer than a normal ticket, because it's designed to stop someone from getting in by impersonating you. Details are in I Lost My Two-Factor Authentication Device.


Changing or turning off 2FA

To switch methods, for example from email to an authenticator app, go to Settings and click Change Method.

To turn off 2FA, go to Settings, click Disable 2FA, and enter your password to confirm. You can turn it back on at any time. We strongly recommend switching methods rather than disabling 2FA entirely. Admin accounts can't disable it.


Need help?

Email [email protected].