Generator/Setup guides/Cloudflare

Cloudflare setup key, and the code it expects

Cloudflare puts the text key beside the QR code and will not let you finish without downloading backup codes.

Service cloudflare.comAlgorithm SHA-1Step 30sDigits 6

Waiting for a keypaste one above to start27

——————

Where Cloudflare hides the key

Profile → Authentication → Two-Factor Authentication → Enable.
The Base32 key sits next to the QR code, no extra click.
Paste it above, enter the six digits, then download the backup codes Cloudflare insists on.

Parameters Cloudflare issues

Algorithm	SHA-1, the RFC 6238 default.
Period	30 seconds
Digits	6
URI format	`otpauth://totp/Cloudflare:you@cloudflare.com?secret=…&issuer=Cloudflare`. Paste the whole URI above and the label fills itself in.

If the key is gone

Backup code, then re-enroll.
Super Administrator on the account can reset another member’s 2FA.
Sole owner with nothing saved. Cloudflare support requires domain-ownership proof, which means DNS access you may no longer have.

Questions

Does enabling 2FA break my API tokens?: No. API tokens and the Global API Key authenticate separately and are unaffected.

Related