2FA methods
One primary two-factor method is active on a UKC login at a time. You can switch methods, but a normal login will not ask for both an email code and an authenticator code.
One active methodEmail or TOTP.
You can switchComplete the new setup.
Backup code remains vitalStore it securely.
Login behavior
UKC Email 2FA sends a code to the login email. Time Based Tokens asks for the current code from the enrolled authenticator app.
Switch methods
Make sure the replacement method is available before disabling the current one. Complete its verification and test a fresh login immediately.
Recovery
Keep it outside the normal login device. It provides a recovery route if email or the authenticator becomes unavailable.
Article feedback
