The Security settings page helps you protect your Chatmo account with additional security features. Currently, the primary focus of security settings is Two-Factor Authentication (2FA), which adds an extra verification layer during login.

Two-Factor Authentication (2FA)
Two-Factor Authentication (2FA) ensures that only you can access your Chatmo account, even if someone knows your password. With 2FA enabled, each login requires an additional verification code from an authenticator app on your device. Chatmo is compatible with Google Authenticator, Authy, and other TOTP apps.
2FA Status (Not Enabled)
When 2FA is not yet enabled, the page displays:
- A shield icon with the title Two-Factor Authentication
- Subtitle: "Add an extra layer of security to your account"
- An info box noting compatibility with Google Authenticator, Authy, and other TOTP apps
- An Enable Two-Factor Authentication button to begin the activation process
Enabling 2FA
The 2FA activation process consists of 3 steps:

Step 1: Scan QR Code
A QR code is displayed on screen for you to scan with your authenticator app. If you cannot scan the code, click "Can't scan? Enter code manually" to reveal a manual key in monospace format. The key includes a copy button for convenience.
Step 2: Verify Code
Enter the 6-digit code displayed by your authenticator app. The input uses an auto-advance system -- after typing one digit, the cursor automatically moves to the next box. A Verify & Enable button confirms the setup and a Cancel button aborts the process.
Step 3: Save Recovery Codes
After successful verification, the page displays your recovery codes:
- Title: "Save Your Recovery Codes"
- Warning: "Store these codes in a safe place"
- A note that each code can only be used once and will not be shown again after closing this page
- Codes displayed in a 2-column grid with monospace font
- Copy All button -- copies all codes to the clipboard (displays "Copied!" feedback after clicking)
- Download button -- downloads a .txt file named
chatmo-recovery-codes.txt - I've Saved My Codes button to complete the setup process
2FA Status (Enabled)
When 2FA is active, the page displays:
- A green Enabled badge in the header
- "Enabled since" information with the activation date
- The number of remaining recovery codes -- displayed in amber as a warning if fewer than 2 remain
- A Disable 2FA button to deactivate
- A Regenerate Codes button -- appears if the remaining code count is fewer than 2
Disabling 2FA
To disable 2FA:
- Click the Disable 2FA button.
- A warning appears: "Disabling 2FA will remove the extra layer of security from your account."
- Enter a 6-digit verification code from your authenticator app.
- Click Confirm Disable to finalize.
Regenerating Recovery Codes
If your recovery codes are running low or are no longer accessible:
- Click Regenerate Codes.
- Enter a 6-digit verification code from your authenticator app.
- New codes will be generated and displayed.
- Save the new codes securely -- all previous codes are automatically invalidated.
Store your recovery codes in a safe place. These codes are the only way to access your account if you lose access to your authenticator app. Each code can only be used once.
Session Management
Session Management is coming soon. You will be able to view active sessions, device information, and terminate sessions from other devices.
What's Next
- Profile -- Manage your profile information and personal data
- Subscription & Billing -- Manage your subscription plan and payment information
