# 2FA - dobbiamo fare qualcosa per attivarla?

**URL:** <https://meta.discourse.org/t/2fa-do-we-have-to-do-anything-to-enable-it/94609>\
**Category:** Product Support\
**Tags:** 2fa\
**Created:** [13 Agosto 2018, 3:55pm UTC](https://meta.discourse.org/t/2fa-do-we-have-to-do-anything-to-enable-it/94609 "2018-08-13T15:55:27Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![AstonJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/astonj/32/215041_2.png) [@AstonJ](https://meta.discourse.org/u/AstonJ)\
**Post date:** [13 Agosto 2018, 4:21pm UTC](https://meta.discourse.org/t/2fa-do-we-have-to-do-anything-to-enable-it/94609/6 "2018-08-13T16:21:24Z")

</div>

Thanks both 🙂

> [@jomaxro](#):
>
> Your Discourse site also knows what those codes are, so when a user tries to log in, after entering their username and password they’re asked for a code. They check their app, enter the code, and the server checks if it’s the same code it expected.

Does it need to connect to a third party to learn/check what those codes are? Or is it all generated on my server?

> [@featheredtoast](#):
>
> A good thing to check is whether or not the server time is in sync with the world (generally through ntp).
> 
> Having an incorrect time can cause some interesting errors as this protocol is time based.

Just checked the time and it’s fine.. would timezones matter? I’m guessing the person is in a different timezone to that of what is set for the server.

---

_[View the full topic](https://meta.discourse.org/t/2fa-do-we-have-to-do-anything-to-enable-it/94609)._
