MyHTSpace Two-Factor Authentication

Two-factor authentication (2FA) means your account needs TWO things to unlock:

  1. Something you know – Your password
  2. Something you have – Your phone or email

Real example:

  • Criminal steals your MyHTSpace password somehow
  • They go to login
  • They enter your username and password
  • System asks: “Enter the 6-digit code from your phone”
  • Thief doesn’t have your phone, so they can’t login
  • Your account is protected

Why This Matters for MyHTSpace

Table of Contents

Your MyHTSpace login account has sensitive information:

  • Your pay stubs (salary information)
  • Your personal information (address, phone, SSN last 4)
  • Your benefits information
  • Your schedule and availability
  • Your direct deposit bank information
  • Your tax documents (W2s, etc.)

If someone gets into your account, they could:

  • See how much you make
  • Change your direct deposit info
  • Access your personal data
  • Potentially commit identity theft

2FA prevents 99% of account takeovers.

Is It Required?

No, Harris Teeter doesn’t require 2FA. But I recommend it.

Why? Because:

  • It takes 5 minutes to set up
  • It takes 5 seconds to use every login
  • It protects your financial and personal information
  • It’s one of the best security investments you can make

Authentication Methods Explained

Harris Teeter offers multiple ways to do 2FA. Choose the one that works best for you.

Method 1: Authenticator App (Most Secure)

What it is: A free app on your phone that generates security codes

Apps available:

  • Google Authenticator (free, iOS/Android)
  • Microsoft Authenticator (free, iOS/Android)
  • Authy (free, iOS/Android)
  • FreeOTP (free, iOS/Android)

How it works:

  1. Download app on your phone
  2. When you login to MyHTSpace, it asks for a 6-digit code
  3. Open app on your phone
  4. App shows a 6-digit code that changes every 30 seconds
  5. Type that code into MyHTSpace
  6. You’re logged in

Pros:

  • Most secure (no phone number needed)
  • No texts/emails to intercept
  • Works offline
  • Codes change every 30 seconds
  • Industry standard

Cons:

  • Need to have your phone with you
  • Need to remember to look at the app
  • If you lose phone, need backup codes

Who should use this: Anyone who wants maximum security

Method 2: Text Message (SMS)

What it is: MyHTSpace texts you a security code

How it works:

  1. You try to login
  2. System asks for 2FA code
  3. You get a text message with a 6-digit code
  4. Type the code into MyHTSpace
  5. You’re logged in

Pros:

  • Very simple – everyone knows how texts work
  • Doesn’t require new app
  • Works on older phones

Cons:

  • Phone number can be intercepted (rare but possible)
  • Requires good cell reception
  • Need to wait for text (usually instant but sometimes delayed)
  • If you lose phone, can’t get texts

Who should use this: People who don’t want to download an app, who have reliable cell service

Method 3: Email

What it is: MyHTSpace emails you a security code

How it works:

  1. You try to login
  2. System asks for 2FA code
  3. You get an email with a 6-digit code (or a link)
  4. Copy code from email or click link
  5. Paste code into MyHTSpace
  6. You’re logged in

Pros:

  • Don’t need to have phone
  • Works on any internet connection
  • No app needed
  • Email is usually reliable

Cons:

  • Slower than text (might wait a few minutes)
  • Email can sometimes go to spam
  • Need internet to check email

Who should use this: People without reliable phone service, those who check email frequently

Step-by-Step Setup

I’m going to walk you through setting up an authenticator app, which I recommend. Adjust as needed if you prefer SMS or email.

Before You Start

Have ready:

  • Your phone (with app already downloaded)
  • Access to MyHTSpace
  • 5 minutes of uninterrupted time

Step 1: Login to MyHTSpace

  1. Go to https://myhtspace.harristeeter.com
  2. Login with your username and password
  3. You should see your Dashboard

Step 2: Go to Account Settings

Look for one of these:

  • Your name in the top right corner
  • Click your name
  • Look for “Settings” or “Account Settings”

OR

  • Gear/settings icon (⚙️)
  • Click it
  • Look for “Security Settings”

Step 3: Find Two-Factor Authentication

In Settings, look for:

  • “Two-Factor Authentication”
  • “2FA”
  • “Security”
  • “Login Security”

Click on it.

Step 4: See Your Options

You should see options:

  • ✅ Enable Two-Factor Authentication
  • Choose authentication method:
    • ☐ Authenticator App
    • ☐ Text Message (SMS)
    • ☐ Email

Step 5: Choose Your Method

For this guide, I’m showing the Authenticator App method.

  1. Click the radio button next to “Authenticator App”
  2. Click “Next” or “Continue”

Step 6: Download App (If You Haven’t)

If you haven’t already downloaded an authenticator app, do it now:

For iPhone:

  1. Open the App Store
  2. Search “Google Authenticator”
  3. Tap “Get”
  4. Confirm with Face ID or Apple ID
  5. Wait for it to download and install

For Android:

  1. Open Google Play Store
  2. Search “Google Authenticator”
  3. Tap “Install”
  4. Confirm installation
  5. Wait for it to install

Which app? Google Authenticator is most popular, but Microsoft Authenticator or Authy work too.

Step 7: Scan QR Code

Back on MyHTSpace setup page, you should see:

  • A QR code (looks like a square barcode)
  • A setup key (a long string of letters and numbers)
  • Instructions

Step 7a: Using Google Authenticator

  1. Open Google Authenticator app on your phone
  2. Tap the “+” button (usually bottom right)
  3. Choose “Scan QR Code”
  4. Point your phone camera at the QR code on your screen
  5. App scans and you’re done

Step 7b: If QR Code Won’t Scan

  1. In Google Authenticator, tap the “+” button
  2. Choose “Enter Setup Key”
  3. Type or paste the setup key from MyHTSpace
  4. Click “Add”

Step 7c: What Happens Next

Once scanned/entered:

  • App shows your MyHTSpace account
  • Below it shows a 6-digit code
  • The code changes every 30 seconds
  • The number shows how many seconds until it changes

Step 8: Enter the Code in MyHTSpace

  1. Look at Google Authenticator on your phone
  2. Read the 6-digit code next to your MyHTSpace account
  3. Go back to MyHTSpace setup page
  4. In the “Verification Code” field, type that 6-digit code
  5. Click “Verify” or “Confirm”

Important: The code changes every 30 seconds. If you take too long, get a new code and try again.

Step 9: Save Your Backup Codes

This is critical!

After verification, MyHTSpace shows you 8 backup codes. They look like:

ABC123DEF456
XYZ789UVW012
...

You MUST save these codes:

Option 1: Write them down

  • Write them on paper
  • Store in a safe place (home safe, locked drawer)
  • Keep separate from your phone

Option 2: Store in password manager

  • Copy the codes
  • Paste into LastPass, 1Password, Authy, or Bitwarden
  • Mark as “MyHTSpace Backup Codes”

Option 3: Screenshot

  • Take a screenshot
  • Store in a password-protected folder
  • Print it out and keep at home

DO NOT:

  • Leave them on a post-it on your desk
  • Email them to yourself (not secure)
  • Text them to someone
  • Store in unsecured cloud (Google Drive without password protection)

Step 10: 2FA is Now Enabled

You should see a confirmation message:

  • “Two-Factor Authentication Enabled”
  • “Your account is now protected”
  • Instructions on what happens next

How to Login With 2FA

Now that 2FA is enabled, every login requires an extra step.

Standard Login Process

Step 1: Go to MyHTSpace

Step 2: Enter Username and Password

  • Username field: Enter your username
  • Password field: Enter your password
  • Click “Login”

Step 3: Enter 2FA Code

  • System asks: “Enter your 6-digit code”
  • Look at your authenticator app
  • Find your MyHTSpace account
  • Read the 6-digit code
  • Type it into the code field
  • Click “Verify” or “Continue”

Step 4: You’re Logged In

  • You should see your Dashboard
  • Done!

Total Time

  • With app memorized: 30 seconds
  • Looking at phone: 1 minute
  • Very quick once you get used to it

Remembering to Check App

First login: You’ll go to your phone, unlock it, open the app, write down the code, go back to computer, type it. Takes maybe 1 minute.

After a few logins: It becomes automatic. You just reach for your phone while you’re typing your password.

Lost Phone or Device

What If Your Phone With Authenticator App Is Lost/Stolen?

Don’t panic. You still have options.

Immediate Access

Use your backup codes:

  1. You should see a field that says “Can’t access your authenticator?”
  2. Click that link
  3. You’ll be asked for a backup code
  4. Enter ONE of your backup codes (the 8 codes you saved)
  5. You can now login
  6. Each backup code can only be used once

Total backup codes: 8 So you can login: 8 more times after losing your phone

Once You’re In

After logging in with backup code:

  1. Go to Account Settings
  2. Click “Two-Factor Authentication”
  3. Click “Disable 2FA” or “Change Method”
  4. You’ll need to verify your identity
  5. Answer security questions or confirm email
  6. Disable the old authenticator
  7. Set it up again on your new phone

If You Don’t Have Backup Codes

If you lost your phone AND you don’t have your backup codes:

You’ll need to verify your identity another way:

  • Contact HR at your store
  • Have them help reset your 2FA
  • They’ll verify you’re who you claim
  • Help you set up 2FA again
  • Should take 15 minutes in person

OR

  • Call MyHTSpace Support: 1-800-HARRI-TT
  • Verify your identity
  • They’ll reset your 2FA
  • Set it up again from home

Backup Codes

What Are They?

Backup codes are one-time codes you can use to login if you can’t access your authenticator app.

  • You get 8 of them when you set up 2FA
  • Each one is unique
  • Each one can be used only ONE time
  • After you use one, it’s gone forever
  • Once all 8 are used, you need new ones

Why They Matter

Backup codes are your insurance policy.

Scenarios where they’re useful:

  • You lost your phone
  • Your app crashed
  • You upgraded to new phone and forgot to transfer
  • Your authenticator app deleted your accounts
  • Your phone won’t charge

All of these can be solved with backup codes.

How to Use a Backup Code

Step 1: Try to login normally

  • Enter username and password
  • System asks for 6-digit code

Step 2: Look for backup code option

  • You should see: “Can’t access your authenticator?” or “Use backup code”
  • Click it

Step 3: Enter backup code

  • You’ll see a field asking for your backup code
  • Get one of your backup codes you saved
  • Type the entire code
  • Click “Verify”

Step 4: You’re logged in

  • You can now access your account
  • System shows: “Backup code used. You have X codes remaining.”

Getting New Backup Codes

After using some backup codes:

  1. Login to MyHTSpace
  2. Go to Account Settings → 2FA
  3. Click “Generate New Backup Codes”
  4. You’ll get 8 new codes
  5. Old codes are invalidated
  6. Save the new ones

Troubleshooting 2FA

Code Invalid or Invalid Code

Why it happens:

  • Code has expired (codes last 30 seconds)
  • You typed it wrong
  • You looked at the wrong account in your app

Fix:

  1. Wait for the code to change
  2. Get the new 6-digit code
  3. Type it carefully (no spaces)
  4. Click Verify

If still failing:

  • Copy the code from the app and paste it (better than typing)
  • Try again with the new code

6-Digit Code Not Showing in App

Why it happens:

  • Wrong account selected in app
  • App needs to be updated
  • Your phone’s time is wrong

Fix:

  1. Look at which account is showing in your app
  2. Make sure it says “MyHTSpace” or “Harris Teeter”
  3. If you have multiple accounts, find the right one
  4. If no codes showing at all:
    • Close the app
    • Open it again
    • Codes should appear
    • If not, your phone time might be wrong

If phone time is wrong:

  1. Go to Settings on your phone
  2. Look for “Date & Time”
  3. Make sure “Automatic” is turned on
  4. Save
  5. Open authenticator app again
  6. Codes should appear

Too Many Failed Attempts

Why it happens:

  • You tried to enter wrong code too many times
  • Account is now locked for security

How long it lasts:

  • Usually 30 minutes
  • Sometimes up to 1 hour

What to do:

  1. Wait 30+ minutes
  2. Try again
  3. If still locked after 1 hour, contact support

I Enabled 2FA but Can’t Login Now

What’s happening:

  • You set up 2FA but something’s not working

Try this:

  1. Make sure your phone time is correct (auto-time)
  2. Close authenticator app and reopen
  3. Wait for code to change and try again
  4. Use a backup code instead
  5. If all else fails, use your backup codes to login
  6. Go to Settings and disable 2FA
  7. Set it up again more carefully

Can’t Scan QR Code

Why it happens:

  • QR code is too small
  • Screen brightness too low
  • App camera permission not enabled

Fix:

  1. Make QR code larger
  2. Increase screen brightness
  3. Check that Google Authenticator has camera permission (in phone Settings → Google Authenticator → Camera)
  4. Instead of scanning, use the manual setup key

Best Practices

Keep Your Backup Codes Safe

✅ DO:

  • Write them down and store at home
  • Store in password manager
  • Keep separate from your phone
  • Print and lock in safe

❌ DON’T:

  • Leave on desk or anywhere visible
  • Email them to yourself
  • Text them
  • Post on social media
  • Store in unsecured location

Keep Your Phone Safe

✅ DO:

  • Use strong phone password/PIN
  • Enable phone lock (biometric or PIN)
  • Know where your phone is

❌ DON’T:

  • Leave phone unlocked
  • Leave phone unattended
  • Use simple PIN like 1234

Update Your Contact Info

  • Keep your phone number current
  • Keep your email current
  • This ensures you can always reset 2FA

Use Password Manager Too

  • Enable 2FA (this page)
  • Use password manager (LastPass, 1Password, Bitwarden)
  • These together = maximum security

Review 2FA Settings Regularly

  • Every 6 months, check your 2FA settings
  • Make sure your authenticator app still has MyHTSpace
  • Make sure your backup codes are safe
  • Make sure your contact info is current

FAQ’S

Is 2FA required?

No, Harris Teeter doesn’t require it. But I recommend it because it protects your account from takeover.

Can I have multiple authentication methods?

Not at the same time. You pick one (app, text, or email). You can change methods later, but only use one at a time.

What if I change phones?

Before you change phones:

  1. Write down your backup codes
  2. Go to MyHTSpace settings
  3. Disable 2FA
  4. Change to new phone
  5. Set up 2FA again on new phone

OR

  1. Add the authenticator app on new phone first
  2. Scan the same QR code or setup key
  3. New phone now has MyHTSpace
  4. You can use either phone temporarily
  5. Eventually delete from old phone

What’s the difference between authenticator apps?

They all work the same way. Google Authenticator is most popular, but Microsoft, Authy, and FreeOTP are equally secure.

Can I use 2FA on my computer instead of phone?

Authenticator apps can be installed on:

  • Windows/Mac (some versions)
  • Mobile phones (recommended)
  • Tablets

For the app versions on computer, yes you can use it there. But most people use their phone since they have it with them.

What if I use the same authenticator for multiple accounts?

That’s fine and actually recommended. Google Authenticator can hold 50+ accounts. Organize them:

  • MyHTSpace
  • Gmail
  • Facebook
  • Work VPN
  • etc.

All in one app is secure.

How often should I change my backup codes?

You only need new ones when you’ve used all 8. You get new ones when you do.

Can someone screenshot my authenticator app?

If someone has physical access to your phone and it’s unlocked, they can see the current code. This is why phone security is important.

Is 2FA 100% secure?

No system is 100% secure, but 2FA is 99.9% secure. It prevents:

  • Password theft
  • Phishing
  • Data breaches
  • Account takeover
  • Most common hacks

What if both my phone and email are compromised?

Extremely unlikely. But if it happens:

  • Contact HR immediately
  • Contact MyHTSpace support
  • They can help reset everything
  • You might need to verify identity in person

Summary: Why You Should Enable 2FA

Threat Without 2FA With 2FA
Password Stolen ❌ Account compromised ✅ Still protected
Phishing ❌ Account hacked ✅ Hacker blocked
Email Breached ❌ Password known ✅ Still need phone
Data Breach ❌ Full access ✅ Still need 2FA code