Create a two factor secret

Generates a secret key for your user. To enable two-factor authentication (2FA), enter this secret into your third-party authenticator application. To complete the 2FA setup, use the Enable two-factor authentication operation to enter a one-time passcode (OTP) from your authenticator app. Once enabled, logins from untrusted computers are required to provide an OTP before they are successful.

Run the Answer security questions operation.

Permissions and scopes

To call this operation, you need permissions, based on the model you're using:

• Identity and access permissions. Your user needs a role with these permissions. Learn more.

  • Permissions: create_profile_tfa_secret

• OAuth scopes. Your user needs these scopes assigned. Learn more.

  • Scopes: account:read_write

CLI

linode-cli profile tfa-enable

Learn more