Authenticator security
Use a TOTP authenticator such as Google Authenticator or Microsoft Authenticator for an additional layer of account protection. Your authenticator factor is managed directly by Supabase Auth.
⌾
Two-factor authentication
Checking…Checking your authenticated account and MFA factors…
Authenticator setup has started. Complete verification below before leaving this page.
1. Scan the QR code
Open your authenticator app and scan this QR code. You can also use the manual key below.
Keep this key private. Anyone with it can generate your authentication codes.
✓ Authenticator enabled
Your TOTP factor is verified and active on this account.
Your TOTP factor is verified and active on this account.
The setup key is not displayed again after verification. If you need a new key, remove the current authenticator and enroll a new one.
Security recommendations
These controls help protect API credentials and your developer account.
✓
Keep API secrets privateDo not put long-lived API credentials in public repositories or browser source code.
✓
Use MFA for production accessKeep your authenticator enabled when managing production API credentials.
✓
Rotate exposed credentialsRevoke an exposed API key and create a replacement immediately.