diff --git a/docs/_static/2fa.png b/docs/_static/2fa.png
new file mode 100644
index 0000000000000000000000000000000000000000..e8d35aaf19e56df08c5cbf0fdafdfd7c63d2d0fe
Binary files /dev/null and b/docs/_static/2fa.png differ
diff --git a/docs/user/01_personal_account.rst b/docs/user/01_personal_account.rst
index 2eb2146060181721247dbef2981892387a89c37f..f9239139a07a78235406fb30f09d69e82a1e88a9 100644
--- a/docs/user/01_personal_account.rst
+++ b/docs/user/01_personal_account.rst
@@ -21,7 +21,26 @@ preferences (cf. [@sec:PersonalPreferences]).
 Setup two-factor authentication
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-TBA.
+
+.. image:: ../_static/2fa.png
+  :width: 600
+  :alt: Configure two factor authentication
+
+AlekSIS provides two factor authentication using hardware tokens such as
+yubikeys which can generate OTPs or OTP application.
+
+To configure the second factor, visit `Account → 2FA` and follow the
+instructions.
+
+Please keep the backup codes somewhere safe so you do not lose access to
+your account. If you are unable to login with two factor authentication,
+please contact your site administrator.
+
+If you forget to safe your backup codes, but you are still logged in, visit
+`Account → 2FA`, and press `Show codes`.
+
+To disable two factor authentication, login to your account an navigate to
+`Account → 2FA`, then press the big red button to disable 2fa.
 
 Change password
 ~~~~~~~~~~~~~~~