Skip to content

[No QA] Update Two-Factor-Authentication.md #90942

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stephanieelliott merged 1 commit into from
May 22, 2026
Merged

[No QA] Update Two-Factor-Authentication.md #90942

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 8 additions & 7 deletions docs/articles/new-expensify/settings/Two-Factor-Authentication.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,15 +20,14 @@ Anyone can enable Two-Factor Authentication on their own account. Domain Admins
2. From the left-hand menu, select **Account > Security**.
3. Under **Security options**, select **Two-Factor Authentication**.
4. Enable **Two-factor authentication**.
4. Save a copy of your backup codes:
- Click **Download** to save them to your computer.
- Click **Copy** to store them in a secure location.
5. Click **Continue**.
6. Open your authenticator app and either:
5. Your Recovery Codes will be automatically saved onto the computer or device where two-factor authentication was set up:
Comment thread
stephanieelliott marked this conversation as resolved.

@github-actions github-actions Bot May 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Step formatting violation: Step 5 describes a system behavior ("Your Recovery Codes will be automatically saved..."), not a user action. Per HELP_AUTHORING_GUIDELINES.md Section 5, all step instructions must be "action-oriented."

Consider reframing as a user action, e.g.:
5. Save a copy of your Recovery Codes (automatically downloaded to your device).

This keeps the step action-oriented while conveying the auto-download behavior.

- However, we also recommend copying and storing them in a secure location.
Comment thread
stephanieelliott marked this conversation as resolved.

@github-actions github-actions Bot May 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Style / tone: The sub-bullet "However, we also recommend..." uses first-person ("we") and starts with a hedging word ("However"). HelpDot articles should be concise and direct. Consider rephrasing to remove first-person and make the recommendation clearer, e.g.:

- Copy and store them in a separate secure location as a backup.

6. Click **Continue**.
Comment thread
stephanieelliott marked this conversation as resolved.
7. Open your authenticator app and either:
- Scan the QR code displayed on your screen.
- Enter the 6-digit code from your authenticator app into Expensify and then click **Verify**.

**Important:** If you lose access to your authenticator app and didn’t save your recovery codes, you may permanently lose access to your account. Consider adding 2FA on multiple devices (e.g., phone and tablet) for backup.
**Important:** If you lose access to your authenticator app and didn’t copy or save your recovery codes, you may permanently lose access to your account. Consider adding 2FA on multiple devices (e.g., phone and tablet) for backup.
Comment thread
stephanieelliott marked this conversation as resolved.

---

Expand Down Expand Up @@ -83,7 +82,9 @@ Expensify's 2FA is implemented via a Time-based One-Time Password (TOTP) algorit

## What can I do if I can't access my authenticator app?

When you enable 2FA, you are prompted to either copy or download backup codes which you can use in lieu of the 6-digit authenticator code. If you downloaded the codes they will be saved with the file name `two-factor-auth-codes`.
When you enable 2FA, Expensify will automatically download a set of Recovery Codes, which you can use in lieu of the 6-digit authenticator code to regain access to your account.

@github-actions github-actions Bot May 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Style / tone: "Expensify will automatically download a set of Recovery Codes" uses first-person brand voice ("Expensify will"). For consistency with the deterministic, user-focused writing style required by HELPSITE_NAMING_CONVENTIONS.md, consider reframing from the user's perspective, e.g.:

When you enable 2FA, a set of Recovery Codes is automatically downloaded to your device. You can use these codes in lieu of the 6-digit authenticator code to regain access to your account.


As long as you set up 2FA after May 2026, the codes will be automatically added to your device's Downloads folder under the file name `DO-NOT-DELETE_Expensify-2FA-RecoveryCodes`.
Comment thread
stephanieelliott marked this conversation as resolved.
Comment thread
stephanieelliott marked this conversation as resolved.

@github-actions github-actions Bot May 22, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Readability / future-proofing: "As long as you set up 2FA after May 2026" introduces a temporal condition that will become confusing over time as more readers will have set up 2FA after that date. Consider removing the date condition or rephrasing to be evergreen, e.g.:

The codes are automatically added to your device's Downloads folder under the file name \DO-NOT-DELETE_Expensify-2FA-RecoveryCodes`.`


## What authenticator apps does Expensify recommend?

Expand Down
Loading