TOTP: Second factor for enhanced security

The TOTP method (technical term: time-based one-time password) protects your data very effectively, because a temporarily generated code is requested in addition to your password.

Technical requirements

To use the TOTP method, you need a device that supports an authenticator app. You can use an authenticator app on your computer, smartphone or tablet.

Step-by-step instructions

Download the authenticator app

For the TOTP method, you need a separate authenticator app or a password manager with TOTP support on your device.

Wichtig:Note: Please make sure to only download trustworthy apps. 
You can use any authenticator app that generates a 6-digit code. The Federal Employment Agency has had good experiences with the free apps ‘Google Authenticator’ and ‘Ente Auth 2FA Authenticator’.
Alternatively, you can use the BA-Secure App.

Login

  • Log in to the online portal with your user name / e-mail address and password.
  • Select ‘Setting up second factor’
Screenshot: Highlighted is the 2-factor method (TOTP)

Scan QR code

  • Scan the QR code shown with your authenticator app on your smartphone 
  • Alternatively: enter the key shown under the QR code into in your authenticator app
Screenshot: Step 1, ‘Add key in app,’ is highlighted.

Complete the setup

The authenticator app generates a new 6-digit code every 30 seconds.

  • Enter the 6-digit code in the corresponding field in your account 
  • Select ‘Confirm’
Screenshot: Step 2 Enter the TOTP code generated

Permanent use of the TOTP method

The authenticator app is now required for every login with your user name /e-mail address and password and must therefore not be deleted.

Video tutorial

Wichtig:Please note that due to technical modifications, the video may look slightly different on arbeitsagentur.de compared to the app. This does not affect the procedure itself.

Trust Level

Logging in with your user name / e-mail address in combination with your password and TOTP grants you access to the basic functions of the online portal, but is limited to certain functions.

Advantages of using the TOTP method

  • positiv:Enhanced security through additional code
  • positiv:Easy to use with common apps such as Google Authenticator
  • positiv:Flexible device combinations: code from your smartphone, login on your PC, for example

Answers to frequently asked questions

If you are able to log in via the BA-Secure App (available in German only at the moment), the BundID or a passkey, you can set up TOTP in your account settings again.

If you do not have any other login options, you will need to contact technical support. Technical support will then guide you through the process.

For security reasons, you cannot deactivate or delete the second factor yourself once it has been set up. You can set up a new second factor, for example when changing devices, in your account settings.

The following error scenarios could be present here:

  1. Typing error: The code does not match the code that was displayed in your authenticator/password manager app at that moment. Please check your entry. Enter the code without spaces as a sequence of 6 digits.
  2. Code expired: The authenticator/password manager app generates a new code every 30 seconds. As soon as a new code is available, the previous code is invalid. If necessary, wait until a new code is generated. You then have 30 seconds to enter and confirm it.
  3. Incorrect app entry: Only use the generated code in your authenticator/password manager app with the name “arbeitsagentur.de”. If you use your authenticator app for different online services, you may have been shown a different code.

If you have problems setting up the login option with a second factor (TOTP), you can contact our technical support.

Wichtig:Important: If you have any questions or problems with your authenticator app, please contact the respective provider. Unfortunately, the Federal Employment Agency cannot assist you with this.