Two-step verification (2FA)

With 2FA on, every sign-in also needs a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy and similar). All users should turn it on.

Turn on 2FA

1. Open Profile from the user icon and click Turn on 2FA.

2. Scan the QR code with your app, or copy the key under Can’t scan? Enter this key instead.

   

3. Enter the 6-digit code in the OTP field and click Save.

4. When you see 2FA is now on, click Close.

Caution

Keep the manual key somewhere safe, such as your company password manager. Without it, a lost phone means asking support to reset 2FA.

Signing in with 2FA

After your email and password, the Confirm it’s you page asks for the code. Enter it and click Confirm.

• You have 5 minutes (Time left); after that you return to the sign-in page.
• Each code works once; wait for the next one if you just used it.
• After more than 5 wrong codes you see “Too many wrong codes. Try again in …” and must wait (1 minute, rising to 15 minutes).

Turn off 2FA, or lost phone

To turn it off, click Turn off 2FA in Profile and enter a current code. If you lost your phone and have no key, contact support. Only the provider can reset 2FA; a partner owner cannot reset it for team members.