What is Two-Factor Authentication?
Two-Factor Authentication (commonly referred to as 2FA) provides an extra layer of security to prevent unauthorized access to your account(s). After entering your kit number or GAP username, you will be prompted to enter a one-time use code before entering your account when 2FA is enabled.
This numeric code will be sent to the email address listed on the kit number/GAP username. The code will be different every time you sign in to ensure that security is always maintained. With Two-Factor Authentication, cybercriminals will need access to your email account as well as your FamilyTreeDNA kit number and password in order to access your data.
Why Two-Factor Authentication is important
It is important to be vigilant about your online security. If the password for your account is compromised, it affects not only your own personal information, but the personal information of your genetic matches as well.
Having Two-Factor Authentication in place means that even if your password for FamilyTreeDNA is compromised, cybercriminals still need access to your email account as well in order to enter your account.
We understand that this additional step can be an inconvenience. This added security measure is optional for kits. However, it is mandatory for group administrators GAP usernames, because GAP accounts can access the accounts of project members, including contact information, and all of the member's matches as well.
Enabling Two-Factor Authentication
Beginning on September 30, 2025, when you sign into your kit or GAP username, you will be prompted to set up 2FA. The set-up process is easy, and the set-up process will explain every step.
You can enable or disable 2FA on your kit at any time from the Security tab of your Account Settings. This cannot be disabled for GAP usernames, but you can manage your preferences in the Security Settings of your GAP account. If there is more than one email address on the kit, you can select the address you prefer to have the code sent during the set-up process.