# Set Up MFA on Your Account
If your organisation requires multi-factor authentication (MFA), you'll be prompted to set it up when you next log in. This guide walks you through the process.
***
## Before You Start
You'll need a smartphone with an authenticator app installed. Any of these free apps will work:
* **Google Authenticator** — [iPhone](https://apps.apple.com/app/google-authenticator/id388497605) | [Android](https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2)
* **Microsoft Authenticator** — [iPhone](https://apps.apple.com/app/microsoft-authenticator/id983156458) | [Android](https://play.google.com/store/apps/details?id=com.azure.authenticator)
If you already use an authenticator app for other services (like online banking), you can use the same app for RTOSafe.
***
## Setting Up MFA
1
### Log in as usual
Enter your email and password. You'll be redirected to the MFA setup screen.
2
### Open your authenticator app
Tap the **+** button (or **Add account**) in your authenticator app to add a new account.
3
### Scan the QR code
Point your phone's camera at the QR code shown on screen. Your authenticator app will automatically add RTOSafe.
**Can't scan the code?** Select **Show** under the QR code to reveal the secret key, then choose "Enter manually" in your authenticator app.
4
### Enter the 6-digit code
Your authenticator app will now show a 6-digit code that changes every 30 seconds. Enter this code and select **Verify and Enable MFA**.
***
## What Happens Next
* MFA is now active on your account
* Each time you log in, you'll enter your password then a code from your authenticator app
* The code changes every 30 seconds — if it's about to expire, wait for the next one
***
## Common Issues
The code doesn't work
The code changes every 30 seconds. Make sure you're entering the current code shown in your app, not an old one. If it's about to expire (timer nearly empty), wait for the next code.
I got a new phone
Ask a compliance admin to [reset your MFA](/help/mfa-reset). You'll then set up MFA again on your new phone when you next log in.
I don't have a smartphone
You can use a desktop authenticator app like [Authy](https://authy.com/) or a browser extension. However, a phone app is more secure and convenient.