Trust & security

TOTP two-factor authentication

Two-factor authentication is available to every Horizons user — and required for advisors operating on client data.

• Time-based one-time passwords (TOTP) per RFC 6238 — compatible with Google Authenticator, 1Password, Authy, and any standards-compliant authenticator app.
• Recovery codes are generated at setup, shown once, and single-use.
• Required for users on the Advisor tier (cannot be disabled while a client household is attached).
• Optional but encouraged for all consumer tiers; recovery flow includes a TOTP challenge before sensitive operations.