Two-Factor Authentication (2FA)

Two-Factor Authentication (2FA)

Two-factor authentication adds a second check on top of your password: a 6-digit code from an app on your phone. Club owners and club admins must turn it on before they can open the club admin panel, because that area holds player data, financial information and payment records for the whole club. Parents and players in the Hub can turn it on any time for extra protection on their own account.

What you'll learn

• How to set up 2FA with an authenticator app
• Where to find 2FA, whether you're a club owner/admin or a parent/player in the Hub
• How backup codes work, and what they're for
• When you're actually asked for a code, and for how long that lasts
• Who is required to enable it
• How to disable it, and what to do if you lose both your phone and your backup codes

Quick Steps

1. Open Security settings — Club owners and admins: go to Account → Security on the club platform, or the Security tab in Account on the coach app. Parents and players: open Account in the Hub — the Two-factor authentication card is always there.
2. Press Enable Two-Factor Authentication — This starts setup and shows you a QR code and a backup setup key.
3. Scan the QR code — Open an authenticator app such as Google Authenticator or Authy and scan it. On the same device and can't scan? Enter the setup key shown underneath instead.
4. Enter the 6-digit code to verify — Type the current code from your authenticator app to confirm it's linked correctly.
5. Save your backup codes securely — You're shown 10 one-time backup codes. Copy or write them down somewhere safe, then confirm you've saved them — you won't see them again.

When you're actually asked for a code

2FA doesn't ask for a code every time you log in. Instead, it's a step-up check the moment you open the club admin panel or the platform admin area — you'll land on a Verification Required screen asking for your authenticator code. Once you've verified, you won't be asked again for 6 hours, however many pages you move between inside the club admin panel.

Backup codes

Each of your 10 backup codes works once, then it's used up. They're there for the Verification Required screen if you don't have your authenticator app to hand — enter a backup code instead of a 6-digit code and it's accepted the same way. If you're running low, the only way to get a fresh set of 10 is to disable 2FA and set it up again.

Who has to enable it

Club owners and admins must have 2FA enabled to open their club's admin panel — you'll see a Two-Factor Authentication Required banner on Account → Security until you do. Coaches who aren't club admins, and parents or players in the Hub, are never required to enable it.

Disabling 2FA

Go to the same Security section and press Disable 2FA. Enter your password and a 6-digit code from your authenticator app to confirm — this clears your secret and all of your backup codes, so you'll start fresh if you set it up again later. If you're a club owner or admin, disabling it locks you out of the club admin panel until you set it up again.

If you lose your phone and your backup codes

Email support@squadtracker.co.uk from the address on your account. We'll need to verify it's you before we can help you back in.

See also Resetting Your Password and Verifying Your Email, I Can't Log In and Your Data: Download a Copy or Delete Your Account.