> ## Documentation Index
> Fetch the complete documentation index at: https://docs.hextrade.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Settings Security

> Protect your account with password controls and two-factor authentication.

# Security

Use the `Security` section to maintain account access controls and reduce account takeover risk.

> \[GIF placeholder: Enabling 2FA and saving backup codes]

***

## Password management

* Update your password regularly.
* Use a strong, unique password.
* Confirm the new password before submission.

***

## Two-Factor Authentication (2FA)

Hextrade supports authenticator-app-based 2FA.

### Setup flow

1. Click `Enable 2FA`.
2. Scan the QR code with Google Authenticator, Authy, or another TOTP app.
3. Enter the 6-digit verification code.
4. Save backup codes in a secure location.

### Disable flow

Disabling 2FA requires a valid authenticator code for confirmation.

> \[Image placeholder: 2FA setup state with QR and code input]

***

## Security recommendations

* Enable 2FA before funding live trading workflows.
* Store backup codes offline in a secure location.
* Never share authentication codes or backup codes.