diff --git a/clean_2f_tokens.md b/clean_2f_tokens.md
new file mode 100644
index 0000000..13c00d9
--- /dev/null
+++ b/clean_2f_tokens.md
@@ -0,0 +1,27 @@
+# How to remove 2 factors authentication tokens?
+
+* become root on os-master01 and/or os-master01.stg
+
+* Run the following commands:
+
+```
+oc project fas
+oc get pods
+```
+
+* Look for the totpcgi-N-hash pods
+
+* Log into that pod:
+
+```
+oc rsh <one of the pods above>
+```
+
+* Clean the tokens:
+
+```
+totpprov delete-user <fas username>
+```
+
+* say yes, exit, and repeat for stg/prod as each has their own db.
+