How matoto Two-Factor Authentication Works
Two-factor authentication combines something you know (your password) with something you have (your phone or authenticator app). When you enable 2FA on matoto, the login process changes slightly. You enter your username and password as usual. Then, instead of immediate access, our system prompts you for a second verification code.
That code comes from one of two sources: a text message (SMS) sent to your registered phone number, or a time-based code generated by an authenticator application on your device. You enter the code within a short time window — typically a few minutes — and then you're logged in. If someone tries to access your account without that second code, they cannot proceed, even if they have your password.
Verification Methods We Support
matoto offers two main 2FA methods so you can choose what works best for your routine.
-
1
SMS Text MessageMethod 1
We send a six-digit code to your registered phone number. You receive it via SMS and enter it into the login screen. This method works on any phone with cellular service and does not require an app download.
-
2
Authenticator AppMethod 2
You install an authenticator application (such as Google Authenticator or Authy) on your smartphone. The app generates a new six-digit code every 30 seconds. During login, you open the app and enter the current code. This method does not rely on SMS and works offline.
Both methods are equally secure. SMS is simpler if you prefer not to install extra apps. Authenticator apps are faster if you want to avoid waiting for a text message. Many users in Jakarta, Surabaya, Bandung, and Medan choose the authenticator method because it works reliably even during peak traffic times.
Why Enable 2FA on matoto
Account security protects your funds, your personal information, and your access to matoto's markets. Without 2FA, a compromised password is the only barrier between an attacker and your account. With 2FA enabled, even a leaked password does not grant access because the attacker would also need your phone or authenticator app.
matoto users who follow live football markets — Liga 1 matches, Piala Indonesia tournaments, or Champions League fixtures — often enable 2FA to ensure their account remains secure during high-activity periods like Idul Fitri or Idul Adha holidays when login traffic peaks. The same applies to users who deposit via DANA, e-wallet, mobile banking, or bank transfers (local payment, online payment, e-wallet, mobile banking) and want to protect their linked payment methods.
Setting Up 2FA on Your matoto Account
Enabling two-factor authentication on matoto takes a few minutes. Here is the process:
- Log into your matoto account and navigate to Account Settings or Security Settings.
- Select "Enable Two-Factor Authentication" or "Add 2FA".
- Choose your preferred method: SMS or Authenticator App.
- If you choose SMS, enter your phone number and confirm it. We send a test code to verify the number works.
- If you choose Authenticator App, we display a QR code. Open your authenticator app, scan the code, and the app automatically adds matoto to your list of accounts.
- Enter the verification code from your chosen method to confirm setup is complete.
- matoto generates backup codes (usually 8-10 single-use codes). Save these in a safe place. If you lose access to your phone, backup codes let you regain account access.
Once 2FA is active, every login requires the second verification step. The process takes less than a minute and becomes routine quickly.
Managing Your 2FA Settings
After you enable 2FA, you can adjust your settings anytime from the Security section of your matoto account.
- Change Method
- Switch from SMS to Authenticator App or vice versa. Disable the current method, then enable the new one.
- Update Phone Number
- If you change your phone, update your registered number in Account Settings so SMS codes reach you.
- Regenerate Backup Codes
- Create a fresh set of backup codes if you suspect your old codes were compromised.
- Disable 2FA
- You can turn off 2FA anytime, though we recommend keeping it enabled for ongoing protection.
If you lose access to your phone or authenticator app, use one of your backup codes to log in. Then update your 2FA settings to regain access to your preferred verification method. matoto support can assist if you lose both your phone and backup codes — contact us through the help section in your account.
