Setting up two-factor authentication
Add a second layer to your sign-in: an authenticator app plus 10 single-use recovery codes. Setup takes 2 minutes. Storing the recovery codes properly is the part that matters.
Why turn 2FA on
A leaked password isn't enough to sign in to your Helpward account once 2FA is on — an attacker would also need your phone (or one of your recovery codes). If you've ever reused a password across sites, or if you handle bookings involving children, elders, or your home, this is the change with the biggest security return per minute spent.
What you'll need
- An authenticator app on your phone. We recommend 1Password, Bitwarden, or Authy — all three keep backups, so swapping phones doesn't lock you out. Google Authenticator and Microsoft Authenticator also work.
- Somewhere safe to store 10 recovery codes — a password manager works, a printed sheet in a drawer works, a sealed envelope in a fireproof box works.
How to enroll
- Go to /settings/security.
- Tap Set up 2FA. We'll show you a QR code.
- In your authenticator app, tap Add account and scan the QR code. If your camera can't scan it, tap Enter setup key in the app and paste the secret we show.
- Your app will start displaying a 6-digit code that refreshes every 30 seconds. Type the current code into Helpward and tap Verify.
- We'll show you 10 recovery codes. Save them right then — this is the only time we'll show them.
- Done. From the next sign-in onward, after your password we'll ask for a fresh 6-digit code from your app.
What recovery codes are for
Recovery codes exist for the scenario where your phone is broken, stolen, lost, or you've changed device and didn't migrate the authenticator app. You'll use them once each — a recovery code that works once doesn't work again.
After signing in with a recovery code, the best practice is to immediately go to /settings/security, disable 2FA, and re-enroll on your new device. That gives you a fresh set of recovery codes too.
If you've lost both
Email safety@helpward.com from the email address registered on your account. We'll verify your identity through a different channel (typically by texting a code to the phone on file, or by asking you to confirm details only you'd know) and remove the factor manually. Expect 24-72 hours.
Disabling 2FA
From /settings/security, tap Disable 2FA, verify a fresh code (or a recovery code), and confirm. We log the disable event to the audit trail so you can see when it happened. We don't recommend disabling 2FA unless you're about to re-enroll on a new device.
Frequently asked
- Do helpers need 2FA too? +
- It's optional for everyone today. We strongly recommend it for helpers given the access they have to customer addresses and the payouts in their account. We'll make it mandatory for helpers later this year.
- Can I use SMS instead of an authenticator app? +
- No. SMS-based 2FA is vulnerable to SIM-swap attacks where someone convinces a carrier to port your number to a new SIM. Authenticator apps don't have that exposure. We don't offer SMS even as an option for that reason.
- What happens to my recovery codes when I regenerate? +
- The previous set stops working immediately. The new set is the only valid set. Make sure you save the new ones before navigating away — we won't show them again unless you regenerate.
- Does 2FA slow down my sign-in? +
- By about 5 seconds — the time to open your authenticator app and type 6 digits. If you use a password manager that supports TOTP (1Password, Bitwarden), the code auto-fills and the extra step is closer to 1 second.
- Managing your notificationsOpen Settings → Notifications to pick which booking, message, receipt, and safety notifications you want by push, email, and SMS.
- Changing your passwordOpen Settings → Security and tap Change password. You'll need your current password plus a new one (8–128 characters).
- Downloading or deleting your dataFrom Settings → Quick Actions, you can request a full export of your Helpward data, or permanently delete your account. Exports arrive by email within 48 hours.
- Referring friends — give $10, get $10Share your unique Helpward code or link. Your friend gets $10 off their first booking; you get $10 in credit when they complete it.