Two-Factor Authentication (2FA)

SAC Bot uses a six-digit TOTP code from an authenticator app. This is personal authentication of your Discord account, separate from server policy tags found in /setup.

Enable - Step by Step

Open Discord in the server where the bot is located and run /2fa.
In action, select Set up authenticator. The bot will send a private reply with a QR code and manual key.
Open your authenticator app, add a new account, and scan the QR. If no camera is available, enter the manual key in the app.
Return to Discord and run /2fa again; select Confirm setup and enter the current six-digit code in the code field.
Verify with /2fa → Check status. 2FA is only active after successful verification.

The temporary setup expires after 10 minutes. If it expired or the code wasn't accepted, start over and sync your device clock.

Keep Your Key Safe

The QR and manual key allow code generation - treat them like a password. The setup message is private; do not screenshot or share it with others.
Keep a backup of your authenticator account according to the app's recovery methods. The bot does not have one-time backup codes.
The key is stored in the bot's database so the server can verify codes. Access to bot tables should remain server-side only.

Connecting to Server Policy

Admin opens /setup → 2FA Settings.
Choose whether to require 2FA for Safe Mode, Staff Login, or Owner Login; you can also require a password together with 2FA for Safe Mode.
Each staff member required to have 2FA must enable it individually using the steps above. If the requirement is active and a user doesn't have 2FA, access will be blocked until setup.
In Safe Mode, run /safemode and confirm the code; use /lock to exit immediately and /status to check.

Server 2FA settings do not enable authenticator for users automatically. Individual setup must be completed for each user who requires it.

Verification & Disabling

/2fa → Check status shows whether 2FA is enabled.
Disable: select Disable 2FA and enter a current code. If the server requires 2FA, Safe Mode or staff login will not be available until re-enabled.
Incorrect code: ensure you selected the correct account, wait for the next code, and sync your phone clock. Do not share the code with the team.