# Approvals with password and second factor

Approval is the moment a human takes responsibility for a change. AdAce Ads makes it deliberate: password, one-time code and a binding to exactly what you saw.

## What it does

The Approvals page lists pending proposals with before/after, reason, origin and limit checks. An owner or admin opens a proposal, reviews it and presses “Approve”, confirming with the account password and, when two-factor authentication is on, a code from the authenticator app.

The approval is tied to the proposal's digest: if the content changed, it cannot be approved as is. Rejections take a reason, and both decisions are written to the audit log. AI clients cannot approve changes.

## Why it helps

- Stolen sessions alone cannot push changes to ad accounts.
- No “approved something else” surprises — the digest guarantees it.
- A clear record of who approved what and when.

## How to set it up

1. Open Approvals.
2. Open a pending proposal and review before/after and checks.
3. Press “Approve” and enter your password and one-time code, or “Reject” with a reason.
4. Watch execution on Operations.

## Good to know

- Proposals expire after 60 minutes; create a new one if needed.
- Clients on the auto policy may apply some reversible changes without a manual approval — see write policies.

---
*Originally published at [AdAce Ads blog](https://ads.adace.website/en/blog/change-control/approvals-with-2fa).*