More documentation about 2FA

web/templates/account/two_factor_setup.html

@@ -118,6 +118,32 @@
                         <strong class="has-text-danger">Disabled!</strong>
                     </p>
 
+                    <h2>What is Two-Factor Authentication?</h2>
+
+                    <p>
+                        Two-Factor Authentication (or 2FA) is a security feature that can help to protect
+                        your account in case somebody finds out your password. When logging in, you can
+                        use an Authenticator App that will generate temporary one-time use codes to
+                        log in to your account.
+                    </p>
+
+                    <p>
+                        For example: if somebody figured out your username and password for {{PrettyTitle}},
+                        they would be able to log in as you with that information. With 2FA you can add
+                        a second factor to your login: the two factors are "something you know" (your password)
+                        and "something you have" (your Authenticator App that produces six-digit codes).
+                        This way, if somebody learns what your password is, they still can't log in to
+                        your account unless they also have your Authenticator App.
+                    </p>
+
+                    <p>
+                        After you set up 2FA, from the next time you log in to {{PrettyTitle}} with your
+                        password, you will also be prompted to enter the six-digit code from your Authenticator
+                        App. In case you lost access to your Authenticator, you will be able to use a
+                        "Backup Code" to log in -- you will be able to see your Backup Codes after
+                        setting up your Authenticator App.
+                    </p>
+
                     <h2>Set up your Authenticator App</h2>
 
                     <p>