Two-Factor Authentication

Add an extra layer of security to your Puree account with two-factor authentication.

What Is Two-Factor Authentication?

Two-factor authentication (2FA) requires a second form of verification when you log in — in addition to your password. After entering your password, you’ll be asked for a 6-digit code from an authenticator app on your phone. This significantly reduces the risk of unauthorised access, even if your password is compromised.

Enabling 2FA

Go to your Account Settings and select Two-Factor Authentication. Click Enable 2FA and follow the steps:

• Download an authenticator app on your phone if you don’t already have one (e.g. Google Authenticator, Authy, or Microsoft Authenticator)
• Scan the QR code displayed in Puree with your authenticator app
• Enter the 6-digit code from the app to confirm the setup
• Save the backup codes that are generated — store them somewhere secure

Logging In with 2FA

Once 2FA is enabled, logging in works as follows: enter your email and password as usual, then open your authenticator app and enter the current 6-digit code. The code changes every 30 seconds, so use the one that’s currently displayed.

Backup Codes

When you enable 2FA, Puree generates a set of one-time backup codes. These are your safety net if you lose access to your authenticator app (e.g. if you lose your phone). Each code can only be used once. Store them securely offline — for example, printed and kept in a safe place. If you’ve used all your backup codes, you can generate a new set from your account settings.

Turning 2FA Off

You can turn 2FA off from the same page, but Puree will ask for a current code (or a backup code) first. If you enter too many wrong codes in a short time, Puree locks code entry for a few minutes. Wait and try again.

2FA and API and AI Access

If you use, or want to use, API and AI access (connected AI apps and access tokens), 2FA is required:

• The account owner needs 2FA on to accept the terms and to give people access.
• Anyone connecting an AI app with Sign in to Puree, or creating an access token, needs 2FA on.
• When you connect an AI app, Puree asks for a code from your authenticator app (or a backup code), unless you entered one in the last 5 minutes, for example when you’ve just signed in.
• If you turn 2FA off, your connected apps and access tokens are paused, not deleted. Turn 2FA back on and they work again straight away.

See Connecting with an AI Agent for connecting an AI app, The Developer API for access tokens and API and AI Access: Decide Who Can Connect AI to Your Puree Account for the full story.

Troubleshooting

• Code not working? — Make sure your phone’s time is synced correctly. Authenticator codes are time-based, so an incorrect clock will generate the wrong code.
• Lost your phone? — Use one of your backup codes to log in, then reconfigure 2FA with a new device.
• Lost both? — Contact support and we’ll help you regain access to your account.

Tips

• We strongly recommend enabling 2FA on all accounts, especially admin accounts and anyone who connects tools or AI assistants to Puree
• Keep your authenticator app updated
• Store backup codes securely offline — not in your email or on your computer
• Consider using a password manager alongside 2FA for maximum security