This task is one section of Odoo administration: seven setup tasks for admins, with 6 related tasks on one page.
1. Open My Preferences
Click your profile avatar at the top right and choose My Preferences. Open the Security tab and click Enable 2FA.
2. Confirm a current code
Enter your password when Odoo asks, then scan the QR code with an authenticator app. If you cannot scan it, use the Cannot scan it? link. Enter the verification code and click Enable Two-Factor Authentication. Do not store a screenshot of the QR code in a chat.
3. Know how a lost phone is recovered
Odoo 19 does not give you backup codes on this screen. If the authenticator is lost, an administrator has to turn 2FA off on that user before the person can sign in. Do that only after you know the request is genuine.
4. Sign in again
Sign out. Sign in with the password, then enter a new authenticator code on the two-factor page. Keep the current session open until that second sign-in works.
5. Frequently asked questions
Does this change my password?
No. You still use the password, then the code.
Should an administrator turn it on for everyone remotely?
Each person should enroll and confirm a code. To require it for everyone, an administrator turns on Enforce two-factor authentication under Settings, in Permissions, for employees only or for all users.
What if the phone is lost?
An administrator turns 2FA off for that user. The person then signs in with the password and enrolls a new authenticator. Reset the password only if the password itself is compromised.
6. Related articles and next steps
Odoo documents these steps in the Odoo 19 two-factor authentication page. Some localizations do not allow 2FA to be turned off.
Continue learning
Describe the version, hosting, and workflow you want to improve. Email OdooMatrix to discuss the next step.