Two-factor authentication (2FA): turning it on, signing in with it and turning it off

Two-factor authentication (2FA) adds a second step when you sign in to the client portal (app.jafx.com). After your password, you enter a 6-digit code from an authenticator app on your phone. Someone who gets your password would also need this code to sign in.

• 2FA is your choice. Nothing in the portal requires it, but we strongly recommend it.
• It works with an authenticator app only, such as Authy or Google Authenticator. We don't send sign-in codes by SMS or email.
• There are no backup codes. Your Secret key is your only backup, so save it when you set 2FA up.

2FA protects your client portal sign-in. Your trading account login is separate: see Logins and passwords explained: portal, trading account and web trader.

Turn 2FA on

1. Install Authy or Google Authenticator on your phone.
2. Sign in to the client portal and open Settings.
3. On the Security card, click Enable 2FA. A QR code and your Secret key appear.
4. In the app, scan the QR code or type in the secret key.
5. Write the secret key down and keep it somewhere safe, away from your phone. With a copy, you can set up the app again on a new phone.
6. Enter the 6-digit code from the app in Verification code and click Activate 2FA.

You see "Two-factor authentication enabled." The Security card now reads "Two-factor authentication is enabled." and your account menu shows 2FA on.

To stop before step 6, click Cancel setup. 2FA stays off.

If the code is not accepted, wait for the app to show a new code and enter it straight away. Check that your phone sets its date and time automatically.

Sign in with 2FA

1. On the sign-in page, enter your email and password and click Sign in.
2. On "Two-factor code.", enter the 6-digit code from your app in Authentication code and click Verify.

The app replaces the code regularly, so always enter the one showing now.

When 2FA is on, the password reset page also asks for your 6-digit Authentication code. See Signing in, forgotten password and password expiry.

Turn 2FA off

1. Sign in and open Settings.
2. On the Security card, click Disable 2FA.
3. The card asks: "Disable two-factor authentication? Your account will be less protected." Click Yes, disable. To cancel, click Keep it on.

You see "Two-factor authentication disabled." Your account menu shows 2FA off. If you turn 2FA on again later, set the app up again with the QR code shown then.

Moving to a new phone

If you still have your old phone:

1. Sign in with a code from the old phone.
2. Turn 2FA off in Settings, then click Enable 2FA again.
3. Scan the QR code with the app on your new phone and finish the steps under Turn 2FA on.

If you saved your secret key, you can instead type it into the authenticator app on the new phone. The app then shows working codes.

Lost your phone or deleted the app?

If you saved your secret key, enter it in an authenticator app on another phone and sign in as usual.

If not, you can't reset 2FA yourself. The sign-in page says: "Lost access? Resetting two-factor authentication requires opening a support ticket and may take up to 7 days." Email support@jafx.com from your registered email address. For the steps, see Account security FAQ: support PIN, 2FA, locked and suspended accounts.

Where to check whether 2FA is on

Need help?

We are available 24/7 via live chat or email (support@jafx.com).