Two-Factor Authentication

Add an extra layer of security to your Puree account with two-factor authentication.

What Is Two-Factor Authentication?

Two-factor authentication (2FA) requires a second form of verification when you log in — in addition to your password. After entering your password, you’ll be asked for a 6-digit code from an authenticator app on your phone. This significantly reduces the risk of unauthorised access, even if your password is compromised.

Enabling 2FA

Open the admin menu (top right) and choose Password, under Your profile. Under Two-factor Authentication, click Enable two-factor authentication, then:

• Open an authenticator app on your phone, or a password manager such as 1Password, and add a new account
• Scan the QR code Puree shows, or type in the key shown beside it
• Enter the six-digit code the app shows and click Turn on
• Puree then shows your backup codes. Save them somewhere safe, then click Done

Using a Password Manager

A password manager such as 1Password is the most convenient way to use 2FA. It keeps your Puree code alongside your password, and fills the code in for you in your browser when you sign in, so you don’t need to reach for your phone. Most password managers can scan the QR code or take the key during setup.

Logging In with 2FA

Once 2FA is enabled, logging in works as follows: enter your email and password as usual, then enter the current 6-digit code from your authenticator app, or let your password manager fill it in. The code changes every 30 seconds, so use the one that’s currently displayed.

Backup Codes

When you turn 2FA on, Puree shows a set of one-time backup codes. These are your safety net if you lose access to your authenticator app (e.g. if you lose your phone). Each code can only be used once, and they are only shown once, so save them straight away, for example in your password manager or printed and kept somewhere safe. If you’ve used them all, turn 2FA off and on again to get a new set.

Turning 2FA Off

You can turn 2FA off from the same Password page, but Puree will ask for a current code (or a backup code) first. If you enter too many wrong codes in a short time, Puree locks code entry for a few minutes. Wait and try again.

2FA and API and AI Access

If you use, or want to use, API and AI access (connected AI apps and access tokens, part of the Professional plan), 2FA is required:

• The account owner needs 2FA on to accept the terms and to give people access.
• Anyone connecting an AI app with Sign in to Puree, or creating an access token, needs 2FA on.
• When you connect an AI app, Puree asks for a code from your authenticator app (or a backup code), unless you entered one in the last 5 minutes, for example when you’ve just signed in.
• If you turn 2FA off, your connected apps and access tokens are paused, not deleted. Turn 2FA back on and they work again straight away.

See Connecting with an AI Agent for connecting an AI app, The Developer API for access tokens and API and AI Access: Decide Who Can Connect AI to Your Puree Account for the full story.

Troubleshooting

• Code not working? — Make sure your phone’s time is synced correctly. Authenticator codes are time-based, so an incorrect clock will generate the wrong code.
• Lost your phone? — Use one of your backup codes to log in, then reconfigure 2FA with a new device.
• Lost both? — Contact support and we’ll help you regain access to your account.

Tips

• We strongly recommend enabling 2FA on all accounts, especially admin accounts and anyone who connects tools or AI assistants to Puree
• Keep your authenticator app updated
• Store backup codes securely offline — not in your email or on your computer
• Consider using a password manager alongside 2FA for maximum security