Reference

Switch On Two-Factor Protection for Your Account

Two-factor authentication (2FA) on roket700 adds a second check every time you log in — your password alone is not enough to open the account.

One-Time Code LoginMobile AuthenticatorAccount Lock LayerWallet Access Shield
roket700 Switch On Two-Factor Protection for Your Account
SETUP HELP PATHS

Get Help During Your Two-Factor Activation

Running into a problem mid-setup is common — here are the channels to reach us before you get locked out or lose your authenticator link.

Team online

Live Chat Support

Open the live chat widget from your account dashboard. Our support team can walk you through the QR scan step or reset a broken 2FA link on your account directly.

Email Verification Help

If you cannot access your authenticator and need a recovery code, email our account security team with your registered details. Identity checks apply before any reset is processed.

Account Settings Path

Go to Security inside your account settings, select Two-Factor Authentication, and follow the step-by-step prompt. The page shows your QR code and a manual entry key as backup.

WHY 2FA MATTERS

How roket700 Handles Account Security Standards

Two-factor authentication is one layer in a broader account-protection approach. Here is what sits behind the setup process and why it matters for your wallet-linked account.

Token Expiry Window

Each one-time code is valid for thirty seconds only. An expired token is rejected automatically, so intercepted codes cannot be reused to access your account.

Backup Recovery Codes

During 2FA setup, we provide a set of single-use recovery codes. Store these offline — they are your only fallback if you lose access to your authenticator app.

Login Attempt Alerts

Any failed login attempt after 2FA is active triggers an account alert to your registered email. You can review recent login activity inside your account security log.

Wallet Link Protection

Because DANA, OVO, and GoPay withdrawals route through your verified account, 2FA acts as a gate before any payout request can be submitted or modified.

roket700 Understand the Two-Factor Setup Process

Understand the Two-Factor Setup Process

When you activate 2FA on your roket700 account, the system generates a unique QR code inside your account security settings. Open an authenticator app — Google Authenticator and Authy both work — scan the code, and the app begins producing six-digit tokens that refresh every thirty seconds. From that point, each login requires your password plus the current token. If you switch

phones, you will need to re-link your authenticator before your old codes stop working, so do this before changing devices. Jakarta and Bandar Lampung accounts follow the same setup path — the process is identical across all regions where access is available under local law.

Two-Factor Setup Glossary

These are the terms you will encounter when setting up or managing two-factor authentication on your account — defined plainly so nothing in the setup flow catches you off guard.

01
What is TOTP?

TOTP stands for Time-based One-Time Password. It is the six-digit code your authenticator app generates every thirty seconds, tied to a shared secret key between your app and the account server.

02
What is a QR code in 2FA setup?

A QR code here encodes your account's secret key in a scannable image. Your authenticator app reads it once during setup to start generating matching one-time codes for every login.

03
What are backup recovery codes?

Single-use codes issued at 2FA activation. Each one replaces a normal token login exactly once. After use, a code is void — keep them stored safely offline in case you lose your phone.

04
What does 2FA seed key mean?

The seed key is the underlying secret string that drives your authenticator's code generation. It is also shown as a manual entry string below the QR code during setup, for devices that cannot scan.

05
What is an authenticator app?

A mobile app — such as Google Authenticator or Authy — that generates TOTP codes locally on your device without needing an internet connection, linked to your account during 2FA setup.

06
What is account re-linking in 2FA?

Re-linking means reconnecting your authenticator app to your account after a device change. You must complete identity verification first, then scan a new QR code to restore two-factor access.

Common Questions About Two-Factor Setup

These are the questions we hear most often from accounts going through 2FA activation or recovery — answered directly so you can move through setup without needing to contact support.

Log in, go to Security in your account settings, and select Enable Two-Factor Authentication. Scan the QR code with Google Authenticator or Authy, enter the first six-digit code to confirm, and save your backup recovery codes before closing the page.

Any TOTP-compatible app works — Google Authenticator, Authy, and Microsoft Authenticator are the most common. They all read the same QR code format and generate compatible tokens for your login.

Use one of your offline backup recovery codes to log in. Once inside, go to Security settings and re-link a new authenticator app. If you have no recovery codes left, contact our support team for an identity-verified reset.

Yes — 2FA must be active and verified before a withdrawal request to DANA, OVO, or GoPay can be submitted. This protects your wallet link from unauthorised payout requests even if your password is exposed.

Go to Security in account settings, select Disable Two-Factor Authentication, and confirm with your current token and password. After disabling, you can immediately run the setup process again to link a new authenticator device.

Yes. Authenticator apps generate TOTP codes locally using your device clock and the stored seed key — no internet connection is needed on the phone. You only need connectivity on the device you are logging into.
Reference

Two Factor Setup

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.