Protect your login: two-factor authentication and Google sign-in
Two-factor authentication (2FA) asks for a 6-digit code from your phone as well as your password, so a stolen password isn’t enough to get in.
Updated
Turn it on
Open Security
In the bottom of the left menu, open Security (2FA) and click Set up two-factor authentication.
Scan the QR code
With an authenticator app such as Google Authenticator, Microsoft Authenticator or 1Password.
Enter the code
Type the 6-digit code the app shows to confirm.
Save your recovery codes
You see them once. Keep them in your password manager; each works once if you lose your phone.
Sign in with Google
Nothing to set up (usually)
If your Google account uses the same email as your OrcaFlo login, just click Continue with Google on the login page. If it doesn’t, sign in with your password and connect Google once in Security (2FA) → Sign-in methods.
Two-factor still applies
If two-factor authentication is on, you still type your 6-digit code after Google.
Signing in with Google never creates a new login: the account has to belong to someone your admin already added. To stop using it, click Disconnect under Sign-in methods; your password keeps working.
Google shares your name and email address with OrcaFlo. OrcaFlo keeps only the email and an account ID, never your Google password, mail or calendar.
Good to know
Two-factor authentication is required for admins from 12 October 2026; the panel reminds you until it’s on.
Turning 2FA on or off, or changing your password, signs out your other devices.
Lost your phone and your recovery codes? Email support@orcaflo-panel.com from your login email address.
orca.flo