Kagi's Docs

Appearance

Two-Factor Authentication (2FA) ​

Two-factor authentication adds a second step when you sign in on a new device. Even if someone learns your password, they can't sign in without your second factor.

Kagi supports three second factors: an authenticator app, a one-time code sent to your email, or a hardware security key. They are managed in your Kagi Account at account.kagi.com.

Set up 2FA before September 10th, 2026?

Your authenticator app keeps working, but your old backup codes were not transferred to the new Kagi Account. Generate new backup codes now.

Setting up 2FA ​

Kagi Account - Second factors

  1. Go to account.kagi.com and open Security > Second factors.
  2. Click Add next to the second factor you want to use:
    • Authenticator app: Scan the QR code with your authenticator app, or copy the setup key into it. Then enter the code it generates.
    • Email code: Receive one-time codes at your account's email address.
    • Security key: Use a hardware security key, such as a YubiKey.
  3. Follow the on-screen steps to finish setup.

Backup codes ​

Kagi Account - Recovery

Backup codes let you sign in if you lose access to your second factor. Generate them right after setting up 2FA:

  1. Go to account.kagi.com and open Security > Recovery.
  2. Click Add next to Backup codes.
  3. Store the codes somewhere safe, such as your password manager. Each code can only be used once.

Signing in with 2FA ​

When you sign in on a new device, you will be asked for your second factor after entering your email and password.

Disabling 2FA ​

Go to account.kagi.com, open Security > Second factors, and remove the second factor you no longer want to use.

Authenticator apps ​

Kagi’s 2FA implementation is compatible with most authenticator apps, some options are provided below:

iOS:

Android:

Cross-Platform: Ente Auth

Some password managers such as 1Password and Bitwarden also have a 2FA authenticator built-in.