Reference

Two Factor Setup on inatogil — Lock It Down Right

Activating two factor authentication on your inatogil account adds a second confirmation step every time you log in, so only you can get through — even if someone else has your password.

OTP via SMSAuthenticator App SupportLogin Alert NotificationsOne-Time Verification CodeSession Lock on New Device
inatogil Two Factor Setup on inatogil — Lock It Down Right
SECURITY STANDARDS

How We Keep Your Two Factor Process Solid

Two factor authentication on inatogil is not a checkbox feature — it sits inside an account security layer that also covers session management, device recognition and login anomaly detection. Here is what that looks like in practice.

Time-Limited OTP Codes

Every one-time code we send expires within 60 seconds of generation. Expired or reused codes are rejected automatically, so intercepted codes cannot be replayed against your account.

Device Recognition Layer

inatogil flags any login attempt from a browser or device we have not seen before on your account. You get an alert and must complete the two factor step before that session is allowed through.

Authenticator App Compatibility

We support time-based one-time password apps including Google Authenticator and similar TOTP-standard apps. Setup takes one QR scan from the security settings page — no third-party account needed.

Recovery Code Backup

During two factor setup we generate a set of single-use backup codes. Save these somewhere safe — they let you regain access if your phone is lost and your SMS OTP cannot be delivered.

SETUP HELP CHANNELS

Need a Hand With Two Factor Setup?

If you hit a snag during activation — wrong number saved, code not arriving, or an authenticator app out of sync — our support team can reset your two factor method without locking you out of your account. Reach us through any of the channels below.

Live Chat Support Open the chat widget from the account menu while you are on the security settings page. Describe your two factor issue and an agent will walk you through it in real time.
Email Verification Help Send your account email address and a description of the two factor problem to our support address. Include the last four digits of the phone number on your account to speed up identity confirmation.
Account Recovery Path If you cannot receive your OTP code at all, use the account recovery link on the login page. You will be asked to confirm your registered e-wallet — DANA, OVO or GoPay — to verify your identity.
inatogil What Two Factor Setup Actually Does for Your Account

What Two Factor Setup Actually Does for Your Account

When you enable two factor authentication, inatogil sends a one-time code to your registered phone number or authenticator app each time a login is attempted. You enter that code after your password — and only then does the session open. The setup process lives inside your account security settings: navigate to Profile, select Security, then tap Enable Two Factor. You can choose

between SMS OTP delivered to your Indonesian number or a time-based code from an app like Google Authenticator. Once active, any login from an unrecognised device triggers an automatic alert alongside the verification prompt, giving you a real-time heads-up on account activity.

Two Factor Setup — Terms You Will See

These are the words and labels you will encounter during two factor setup on inatogil. Quick plain-language definitions so nothing looks unfamiliar when you are going through the steps.

What is OTP?

OTP stands for One-Time Password — a short numeric code, usually 4-6 digits, that is valid for a single login attempt and expires within seconds of being generated.

What is TOTP?

TOTP means Time-Based One-Time Password. An authenticator app generates a fresh code every 30 seconds using a shared secret key, without needing an internet or SMS connection.

What is a backup code?

A backup code is a single-use alphanumeric string created during two factor setup. Use one only when your primary verification method — SMS or authenticator app — is unavailable.

What is a trusted device?

A trusted device is a browser or phone your account has already verified through the two factor process. Subsequent logins from that device may skip the extra code step, depending on session settings.

What does 2FA mean?

2FA is the common short form of two factor authentication — a security method that requires two separate proofs of identity before granting access to an account or session.

What is a QR code in authenticator setup?

During authenticator app setup, inatogil displays a QR code that your app scans to create the shared secret. Scan it once and the app begins producing valid TOTP codes immediately.

Two Factor Setup — Questions We Hear Most

These are the questions that come up most often when setting up or managing two factor authentication on inatogil. Answers are based on how our system actually works, not general advice.

Log into your account, go to Profile in the top menu, then select Security. The Enable Two Factor option is listed there. The whole activation process takes under two minutes once you are on that page.

Yes. During setup you can choose between SMS to your registered Indonesian number or a TOTP authenticator app. Scan the QR code shown on the security page and your app starts generating codes right away.

Check that the phone number saved on your account is your current active number. If the SMS is delayed, wait 60 seconds and request a new code. If the issue continues, contact live chat support from the account menu.

Use one of the backup codes you saved during initial setup. If you did not save them, use the account recovery path on the login page and verify your identity using your registered DANA, OVO or GoPay wallet.

Two factor only applies to the login step. Once you are inside your account, deposits via DANA, OVO or GoPay and withdrawal requests follow their normal verification steps, separate from the two factor login check.

You can turn it off from the same Security page where you activated it. We recommend keeping it active — it is the strongest protection against unauthorised access to your account and wallet activity.
Reference

Two Factor Setup

Service availability depends on eligible regions and local law. Users should check local rules before opening an account.

Access may be available only where local law permits.