Two-Factor Authentication on AffClix: Benefits, Setup, and Account Recovery

Your affiliate account holds tracking links, payout details, publisher relationships, and campaign data — everything a stolen password could expose. Two-factor authentication (2FA) closes that gap by requiring a second, time-based code that only you can generate. This guide explains why 2FA matters, how to turn it on in AffClix, how to sign in with it, and — most importantly — how to get back into your account if you ever lose your authenticator app.

Why Two-Factor Authentication Matters

A password is a single point of failure. If it is guessed, phished, reused from a breached site, or leaked in a data dump, whoever holds it can sign in as you. For an affiliate account that controls payouts and traffic, that is not a minor inconvenience — it is direct financial and reputational risk.

Two-factor authentication adds a second requirement that a remote attacker almost never has: a rotating six-digit code generated on your own phone. Even with your correct password, they cannot pass the second step. The numbers show why this matters:

The Advantages of Turning It On

Beyond the headline security gain, app-based 2FA brings a set of concrete, practical benefits:

• Stops credential-based attacks. Leaked, reused, or phished passwords become useless on their own — the attacker still cannot produce your current code.
• Phishing resistance. Time-based codes expire in about 30 seconds, so a code captured on a fake page is worthless moments later.
• No phone number exposure. AffClix uses app-generated TOTP codes rather than SMS, so you are not vulnerable to SIM-swap attacks or carrier interception.
• Works offline, anywhere. Your authenticator app generates codes locally on the device — no signal, data, or roaming needed.
• You stay in control. 2FA is a per-user opt-in and you hold single-use recovery codes, so you are never locked out by a setting an administrator changed.

How AffClix 2FA Works

AffClix uses the TOTP standard (Time-based One-Time Password, RFC 6238) — the same mechanism behind Google Authenticator, Authy, 1Password, and Microsoft Authenticator. When you enable 2FA, AffClix generates a secret key and shows it to you as a QR code. Your authenticator app scans that code once, stores the secret, and from then on produces a fresh six-digit code every 30 seconds.

At login, AffClix computes the expected code from the same secret and compares it to what you type. Because both sides derive the code from the shared secret and the current time, they always match — without anything being sent between them. Two-factor authentication is available on Business, Pro, and Enterprise plans, and each user enables it on their own account.

How to Enable 2FA, Step by Step

Setting up two-factor authentication takes about two minutes. You will need your phone with an authenticator app installed (Google Authenticator, Authy, 1Password, or Microsoft Authenticator all work).

• Sign in to AffClix and open Account Security from your profile menu.
• Find Two-Factor Authentication and select Enable. AffClix displays a QR code and a manual setup key.
• Open your authenticator app, choose Add account, and scan the QR code — or type the setup key by hand if you cannot scan.
• Your app now shows a rotating six-digit code for AffClix. Enter that code on the setup screen to confirm and activate 2FA.
• AffClix shows your recovery codes. Save them somewhere safe before you close the screen — this is the only time they are shown in full.

Logging In With Two-Factor Authentication

Once 2FA is active, signing in gains one quick extra step:

• Enter your email and password as usual and submit the login form.
• AffClix asks for your two-factor code. Open your authenticator app and read the current six-digit code for AffClix.
• Type the code before it rotates and confirm. You are signed in — the code is never reused, and the next login asks for a fresh one.

Recovering Access If You Lose Your Authenticator App

Losing the phone that holds your authenticator app does not mean losing your account. A common point of confusion: 2FA protects the login step, not your password itself — so recovery is about getting past that second step, after which you can reset your password or re-enrol a new device. There are two paths back in.

Path 1 — Use a recovery code

This is why the recovery codes matter. On the two-factor prompt, choose the option to use a recovery code instead of an app code, then enter one of the eight codes you saved when you set up 2FA. Each code works once. AffClix logs you in immediately, after which you should open Account Security, disable and re-enable 2FA to pair your new phone, and generate a fresh set of recovery codes.

Recovery codes (each works once):

    7K4QF-2M9XP        R8T3W-JYH6N
    QP5DZ-4B7VK        3NXME-9WQ2R
    L6HRT-8KPZ2        WV2FQ-5JDN7
    8MYK3-Q4RTW        ZP9BX-2H6LM

Path 2 — You lost the app and the codes

If your authenticator app is gone and you cannot find your recovery codes either, an administrator or the AffClix support team can restore access after verifying your identity. Do the following:

• If your organisation has another administrator, ask them to reset two-factor authentication on your user from the team management screen.
• Otherwise, contact AffClix support from the email address registered to your account so ownership can be confirmed.
• Once your identity is verified, support disables 2FA on your account so you can sign in with your password alone.
• Immediately re-enable 2FA with your new device and store a new set of recovery codes before you finish.

Best Practices

A few habits keep two-factor authentication working for you rather than against you:

• Store recovery codes in a password manager, separate from the device that runs your authenticator app.
• Use an authenticator app with encrypted cloud backup, or add AffClix to more than one device, so a lost phone is a minor event.
• Regenerate your recovery codes if you ever suspect they were exposed — old codes are invalidated the moment you do.
• Keep the email address on your account current, since it is how support verifies you during recovery.
• Encourage everyone on your team who can access payouts or campaign settings to enable 2FA as well.

Frequently Asked Questions

Which authenticator apps work with AffClix 2FA?

Any app that supports the TOTP standard (RFC 6238), including Google Authenticator, Authy, 1Password, and Microsoft Authenticator. AffClix issues a standard QR code and setup key, so you can use whichever app you prefer.

What happens if I lose my phone or authenticator app?

Use one of the eight single-use recovery codes you saved when enabling 2FA — enter it on the two-factor prompt instead of an app code. If you have also lost your recovery codes, another administrator or AffClix support can remove 2FA after verifying your identity, letting you sign in and set it up again.

Does two-factor authentication change my password?

No. 2FA adds a second step after your password at login; it does not alter the password itself. If you lose access through your authenticator app, recovery is about clearing that second step, after which you can reset your password and re-enrol a new device as normal.