Security

To turn on two-factor, go to Settings, then Account, then Security and click Enable Two-Factor Authentication. Scan the QR code with an authenticator app (Authy, 1Password, Google Authenticator) and enter the 6-digit code to confirm. Two-factor supports authenticator apps only, not SMS, and it is optional on every plan.

You get 8 codes in XXXX-XXXX format, each usable once. Save them when they appear: Annsa keeps only a hashed copy, so they can't be shown again. Generate new codes under the same settings issues 8 and retires the old ones. If you lose both your authenticator and your codes, email support@annsa.ai.

The browser where you turned on two-factor stays signed in. Anywhere else you're signed in, Annsa asks for a code the next time the page loads. Have your authenticator app ready before you turn it on from a second device.

To disable it, go to Settings, then Account, then Security, click Disable and enter a current code. If you lost the app, enter a recovery code where Annsa asks for the 6-digit code. Entering a recovery code switches two-factor off, signs you out everywhere and lets you sign back in. Turn it on again from the new device.

Settings, then Account, then Security shows which methods are linked: email, Google, GitHub. Unlink any you no longer use, as long as one stays active.

Connecting an agent with OAuth is a person sign-in. It acts as you, with your rights, and has no revoke button in the app. An agent credential works differently. An owner mints one per agent at Settings, then Integrations, then Agents, then New agent. It expires after 365 days and the token is shown once. To revoke it, use the row's Revoke and confirm (owner only). An agent credential is refused the actions that decide things for you, such as sign, park and share, and it can't answer for you. See Tools and actions.

Set once at the banner and remembered. Change them at Settings, then Account, then Privacy.