> For the complete documentation index, see [llms.txt](https://polycop.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://polycop.gitbook.io/docs/security-2fa.md).

# Security: 2FA

## Two-Factor Authentication (2FA)

Enable 2FA to add an extra layer of protection to your wallet. **Before withdrawing funds or exporting your private key, you must enable 2FA and verify the action with a code from your authenticator app.**

### Enable 2FA

#### 1. Open the setup page

Open PolyCop Bot, go to **Wallet**, and tap **2FA**.

The Bot will send you a QR code and a **setup key**.

#### 2. Add your account to Google Authenticator

Open **Google Authenticator**, tap **+**, and choose either option:

* **Scan a QR code:** Scan the QR code sent by the Bot.
* **Enter a setup key:** Copy the **Setup key** from the Bot’s message. Enter an account name, such as PolyCop, paste the key, and select **Time based**.

If you are viewing the QR code on your phone, use the setup key to add your account without another device.

[Learn how to use Google Authenticator](https://support.google.com/accounts/answer/1066447)

#### 3. Reply with your verification code

Once added, Google Authenticator will display a **6-digit verification code**.

Reply to the Bot with the current code to complete setup.

**You only need to enable 2FA once per user account in PolyCop Bot. It applies to all your wallets within the Bot.**

### Withdraw Funds or Export Your Private Key

1. Tap **Withdraw** or **Export Private Key**.
2. Open Google Authenticator and find your PolyCop account.
3. Reply with the current **6-digit verification code** when prompted.
4. Once verified, continue with your action.

If you have not enabled 2FA, tap **2FA** in the prompt to complete setup first.

### Frequently Asked Questions

#### My code is invalid or expired. What should I do?

Make sure you are using the code for the correct PolyCop account. If it is about to expire, wait for a new code and try again. Also check that your phone’s date and time are set automatically.

#### The Bot says I have already enabled 2FA. What should I do?

Your account is already linked. Use the existing PolyCop entry in your authenticator app whenever verification is required.

#### What is the difference between a setup key and a verification code?

The **setup key** is used to add your account to the authenticator app during setup.

The **6-digit verification code** changes regularly. It is used to confirm setup and verify withdrawals or private key exports.

### Security Tips

* **Never share your QR code, setup key, or verification codes.** Anyone with your QR code or setup key can generate verification codes.
* Complete setup and verification only in your private chat with PolyCop Bot.
* Before replacing or resetting your phone, transfer or back up your authenticator accounts.