Multi-Factor Authentication in 📝MythOS is the 📝Accounts, Auth & Security feature that adds a second step to signing in: a six-digit code from an authenticator app, on top of your password. Enrollment is a QR code you scan once, and signing in afterward asks for the current code.
A library is a personal archive — journals, private memos, contacts, an AI agent with access to all of it. A password alone is a single point of failure for the whole thing.
It is for anyone whose library holds something they would not want read by someone who guessed or reused a password, which is most people who write in one daily.
Key Capabilities
- TOTP via any authenticator — Google Authenticator, Authy, 1Password, or any app implementing the standard.
- Scan or type — enroll from the QR code, or copy the manual-entry key if you cannot scan.
- Verified before it counts — enrollment only completes once you enter a valid code, so a half-set-up factor never locks you out.
- Challenge at sign-in — with 2FA on, signing in asks for the current code from your authenticator app before your library opens.
- Recovery codes — enrollment issues ten single-use codes, displayed once. They are your way back in if the authenticator is gone.
- Turn it off deliberately — unenrolling removes the verified factor from your account and returns sign-in to password-only.
Getting Started
- Go to Settings → Security.
- Choose Enable 2FA to generate a factor, then scan the QR code with your authenticator app — or copy the manual-entry key.
- Enter the six-digit code the app shows to verify and finish enrolling.
- Save the recovery codes you are shown. This is the only time they appear — download them or store them somewhere that is not the device running your authenticator.
- Sign out and back in once to confirm the challenge appears as expected.
FAQ
- Which authenticator apps work? Any TOTP app. The setup screen names Google Authenticator, Authy, and 1Password as examples, but the standard is what matters.
- What if I cannot scan the QR code? The setup step shows a manual-entry key you can type into your app instead.
- What happens if I lose my device? Use one of the recovery codes from enrollment. Entering one signs you in and turns two-factor authentication off, so you can set it up again on your new device. Each code works once, and a used code is spent whether or not you re-enroll.
- What if I lose the recovery codes too? Recovery then means contacting support to remove the factor. While you still have your authenticator, you can generate a fresh set from Security settings — regenerating invalidates every outstanding code.
- Does this protect the AI chat and API access too? 2FA guards interactive sign-in. Agent API keys and MCP connections authenticate separately, so treat those keys as credentials in their own right.
- Can I turn it off? Yes, from the same Security settings page. That removes the verified factor and returns your account to password-only.
Related
- 📝Signing In — the sign-in methods a second factor sits on top of