# Security Settings in RudderStack Dashboard


This guide explains the security settings available in the RudderStack dashboard.

## Overview

Go to **Settings** > **Your Profile** > **Security** to review and update your security settings.

In this section, you can:

- Change the RudderStack account password
- Set up two-factor (2FA) authentication for your personal account

{{< image src="images/dashboard-guides/security/security-settings.webp" alt="Security settings in RudderStack dashboard" >}}

## Change account password

Click the **Change password** button to change the password you use to log in to the RudderStack dashboard.

## Two-factor authentication

Two-factor authentication (2FA) adds an extra layer of security to your account by requiring more than just a password to sign in.

{{< warning >}}
**Important considerations**

- If you're an [Admin]({{< ref "access-management/member-management.md#member-roles" >}}) and want to enforce 2FA for all organization members, use the **Require 2FA** toggle in the [Organization settings]({{< ref "dashboard-guides/_index.md#require-2fa-toggle" >}}).
- Org Admins **cannot** update an individual user's 2FA settings.
- Once the 2FA setup is complete, you will be automatically logged out of the RudderStack dashboard and prompted to log in again.
- If you disable a 2FA method (authenticator app or SMS), you must set it up from scratch to use it again.
{{< /warning >}}

RudderStack provides the following two-factor authentication methods:

### Authenticator app

1. Click **Set up** next to the **Authenticator app** setting.
2. Scan the QR code with your preferred authenticator app.
3. Enter the code generated by the authenticator app and click **Save** to complete the setup.

{{< image src="images/dashboard-guides/security/2fa-authenticator-app-method.webp" alt="Authenticator app setup" >}}

4. You will see a dialog containing the backup codes. Download or copy the backup codes and save them in a secure location. Then, click **I've saved my codes** to confirm and close the dialog.

### SMS

1. Click **Set up SMS** next to the **SMS** setting.
2. Enter your phone number (including the country code) and click **Send code**.
3. Enter the code received on your phone and click **Verify Me** to complete the setup.

{{< image src="images/dashboard-guides/security/2fa-sms-method.webp" alt="SMS setup" >}}

4. You will see a dialog containing the backup codes. Download or copy the backup codes and save them in a secure location. Then, click **I've saved my codes** to confirm and close the dialog.

## Regenerate backup codes

{{< info >}}
Note that:

- This setting is hidden if neither of the two-factor authentication methods (authenticator app or SMS) is enabled.
- You can regenerate backup codes only 10 times.
- Regenerating backup codes will invalidate the existing codes.
{{< /info >}}

1. Click **Regenerate** to generate backup codes to recover RudderStack access if you can't use your two-factor authentication.

{{< image src="images/dashboard-guides/security/regenerate-backup-codes.webp" alt="Regenerate backup codes" >}}

2. Download or copy the backup codes and save them in a secure location.
3. Click **I've saved my codes** to confirm and close the dialog.

{{< image src="images/dashboard-guides/security/2fa-backup-codes.webp" alt="Backup codes" >}}