Does Eflexsim have two-factor authentication?

No. Eflexsim does not support two-factor authentication. There is no authenticator-app setup, no recovery codes, and no 6-digit prompt at sign-in. If you were looking for a security page to enable it, that setting does not exist — on the website or in the Eflexsim app.

Below: what does protect your account today, the one thing you can do that gets you closest to 2FA, and what we do if your account is ever compromised.

What protects your account today

These are the real controls, and all of them are live:

Password sign-in. Your account is protected by your email and password. When you change your password from your account, the new one must be at least 12 characters.

Sign in with Google or Apple. You can sign in to Eflexsim with your Google or Apple account instead of an Eflexsim password. This is the closest thing to 2FA available today — if you have two-factor authentication turned on with Google or Apple, that protection applies when you sign in to Eflexsim through them. We never see your Google or Apple password.

New-device alerts. When your account is signed into from a device we haven't seen before, we email you at the address on your account. The alert gives you the date, time, and a short description of the device. It does not include a location — we don't have one and we won't guess. The alert fires on a new device only, so signing in from a new country on a phone you've used before won't trigger it.

Password reset by email. Resetting a password requires access to your email inbox, so an attacker who knows only your password can't lock you out through the reset flow. The flip side is that whoever controls your inbox can reach your Eflexsim account — so securing your email account matters as much as securing this one.

Biometric app lock (mobile only). In the Eflexsim app you can require Face ID, Touch ID, or your fingerprint to open the app. This is a lock on the app on that phone — it protects the app if someone picks up your unlocked phone. It is not account-level 2FA and it does nothing on the website.

The strongest thing you can do right now

Sign in with Google or Apple, and make sure two-factor authentication is enabled on that account. Because your Eflexsim sign-in then runs through Google or Apple, their second factor stands in front of your Eflexsim account too.

If you'd rather keep an email-and-password sign-in, then the useful steps are ordinary ones:

• Use a password you don't use anywhere else, stored in a password manager.
• Use an email address you'll control long-term, and secure that email account itself — whoever controls your inbox can reset your Eflexsim password.
• Read the new-device alert emails when they arrive rather than dismissing them. That email is the signal that catches someone else signing in.

If you think someone else has your password

Do this in order:

1. Change your password. Sign in, go to Account → Account details → Security, and set a new one. You'll need your current password to do it.
2. Check for activity you don't recognise in Account → Orders and Account → Wallet.
3. Email support@eflexsim.com. Say you think your account was accessed by someone else. We can sign every session out of your account, which immediately kicks out anyone signed in on another device, and we can look into any orders you didn't place.

Changing your password does not by itself sign other devices out, and there is no button on the site that does it. If someone is in your account right now, say so in the email and ask us to sign all sessions out — that's the control that removes them.

For password resets, see how to reset my password. For lost email access, see lost access to your email. For the new-device alert emails, see why you got a "new login" email.