What is Two-Factor Authentication?
Two-factor authentication (2FA) adds an extra layer of security to your Felix account. Once enabled, you'll need to enter a one-time 6-digit code from an authenticator app each time you log in — in addition to your email and password.
Authenticator apps are free apps on your phone that generate these codes. Popular options include:
Google Authenticator (App Store/Google Play)
Authy (App Store/Google Play)
1Password (App Store/Google Play)
You'll need to download one before getting started, so ensure you get this setup before moving on to any next steps!
How to Find Your Security Settings
On the Felix app (iPhone or Android)
Tap the 'Account' tab at the bottom of the screen.
Tap 'Security' from the menu.
On the Felix website
Click your 'Account' dropdown in the top-right corner.
Click 'Security'.
How to Turn On Two-Factor Authentication
Go to your 'Security' settings (see above).
Find the 'Two-Factor Authentication' section and tap the toggle to turn it on.
A QR code will appear on screen. Open your authenticator app and scan the QR code. If you can't scan the QR code, tap the code shown underneath it — you can type this code manually into your authenticator app instead.
Tap 'Continue'.
Your authenticator app will show a 6-digit code. Enter it on the Felix screen and tap 'Verify'.
You'll be shown a set of recovery codes. Save these somewhere safe (like a note on paper or a secure notes app) — you'll need them if you ever lose access to your authenticator app.
Tap 'Copy' to copy all of them at once.
Tap 'Done'. Two-factor authentication is now on.
How to Log In Once 2FA is Turned On
After entering your email and password, you'll be asked for a verification code.
Open your authenticator app on your phone.
Find the 6-digit code listed under Felix.
Enter the code and tap 'Verify'.
Note: These codes refresh every 30 seconds. If the code looks like it's about to expire, wait for the new one before entering it.
What to Do if Your Code Isn't Working
If you're entering the code but keep getting an error, here are the most common reasons and how to fix them:
The code expired: Wait for your authenticator app to show a new code and enter it right away.
Wrong account selected: Make sure you're using the code for Felix in your authenticator app, not a code for a different service.
Your phone's clock is off: These codes rely on your phone's time being accurate. Go to your phone's settings and make sure the date and time are set to update automatically.
Your session timed out: If you see a message saying "Your session has expired," go back to the login screen and start over.
What to Do if You Can't Access Your Authenticator App
If you've lost your phone, deleted the app, or can't access your codes, you can use a recovery code to log in instead.
On the login screen where it asks for your verification code, tap "Use a recovery code."
Enter one of the recovery codes you saved when you set up 2FA.
Note: Each recovery code can only be used once.
If you don't have your recovery codes and can't access your authenticator app, please reach out to our support team and we'll help you get back into your account.
How to Turn Off Two-Factor Authentication
A heads up before you disable 2FA:
Your Felix account holds sensitive health and payment information. Keeping two-factor authentication on is the best way to make sure only you can access it.
Go to your 'Security' settings.
Tap the 'Two-Factor Authentication' toggle (it will be green/on).
Enter your account password when prompted and tap 'Disable'.
Note: If you've forgotten your password, use the
Forgot Password option on the login screen to reset it first, then come back and disable 2FA.
Managing Trusted Devices
When you log in with 2FA, you can check "Trust this device" to skip the verification code on that device for future logins.
To view or remove your trusted devices:
Go to your 'Security' settings.
Scroll down to the 'Trusted Devices' section, just below the 2FA toggle.
Tap the trash icon next to any device to remove it.
If a trusted device keeps asking for a code:
On a browser: clearing your cookies or browser history removes the trust — you'll need to verify once more and re-trust the device.
On the mobile app: uninstalling and reinstalling the app also resets trust.