Manage available two-factor methods and disabling controls

For eligible accounts, the profile's Account tab includes Two-Factor Authentication. When enabled, the panel offers a cell-phone field for SMS and a QR code for configuring a mobile authenticator. Treat the QR code and codes as account secrets; do not send them to support. Delivery methods depend on the account and school configuration, so do not assume email will always arrive or claim it has universally been discontinued based on a historical message.

Where permitted, the panel offers Disable Two-Factor Authentication with confirmation. The UI does not offer disabling to GiveCampus employees or administrators with bank-account modification permissions. Confirm applicable school/role requirements; do not bypass a missing control or use another person's settings. Different roles and verified sessions can explain why coworkers see different prompts, but a specific account needs inspection.

For missing codes, confirm destination and request time, use the newest code, and have support inspect delivery if necessary. Repeated failed entries can lock the account. A generic page saying blocked during an image upload or settings save is not by itself evidence of this authentication lockout. The configured password-lock strategy uses email; do not assume that every account automatically unlocks after an hour.