What is 2FA?
Two-Factor Authentication (2FA) adds an extra layer of security to your Grvt account. When enabled, certain sensitive actions will require you to enter a one-time passcode (TOTP) generated by your authenticator app, in addition to your usual login credentials.
Is 2FA mandatory?
No. 2FA is optional and is off by default. You can choose to enable it for added security. If you attempt an action that is protected by 2FA and you have not set up 2FA, Grvt will suggest you enable it — but you may dismiss the prompt and proceed without it.
Once 2FA is enabled, you must enter your TOTP code to complete any 2FA-protected action. This cannot be dismissed.
Setting Up 2FA
Before you begin: You must have an email address linked to your Grvt account before enabling 2FA.
Steps:
1. Go to Account Settings → Security.
2. Click Add 2FA.
3. Scan the QR code with your authenticator app (e.g. Google Authenticator, Authy).
4. Enter the 6-digit code from your app to confirm setup.
5. Review and accept the following acknowledgement before proceeding:
By enabling 2FA, you acknowledge that you are responsible for maintaining access to both your email account and your 2FA method. Grvt will not be able to restore access if both are lost simultaneously, and funds may become permanently inaccessible. Save your 2FA secret in a secure location.
Important: Protecting Your Account Access
If you lose access to both your email and your 2FA method, Grvt will not be able to restore access to your account. Your funds may become permanently inaccessible.
We strongly recommend:
Saving your 2FA backup/recovery codes in a secure location (e.g. a password manager or offline storage).
Ensuring your registered email account remains accessible.
Actions Protected by 2FA
When 2FA is enabled, TOTP verification is required for sensitive account operations, including:
Adding or changing a SecureKey
Managing API keys
Other high-risk account actions
Note: 2FA is not required to sign in to your Grvt account.
Removing 2FA
There is no on/off toggle for 2FA. To disable it, you must remove 2FA from your account.
1. Go to Account Settings → Security.
2. Click Remove 2FA and follow the verification steps.
If you are unable to complete the removal yourself, please contact Grvt Support. Our team will follow a secure verification process before processing your request.
Lost Access to Your 2FA?
If you have lost access to your 2FA method, please contact Grvt Support through your registered email. Our Customer Support team will guide you through the account recovery process.
Please note that account recovery is subject to identity verification. Recovery cannot be guaranteed if access to both your email and 2FA method is lost.