Two-step sign-in with an authenticator app

With two-step sign-in, signing in asks for your password and then a 6-digit code from an authenticator app on your phone (Google Authenticator, Microsoft Authenticator or similar). The code changes every 30 seconds, and each code works once.

Turn it on

1. Open your account menu and select Sign-in and security.

2. In Two-step sign-in, select Turn on and enter your password.

3. Scan the QR code with your authenticator app. If you cannot scan it, select Copy the key and type the key into the app.

4. Enter the 6-digit code the app shows and select Confirm.

5. Save your recovery codes: copy them or select Download (.txt), keep them somewhere safe, and tick I saved these codes in a safe place. They are shown only this once.

Sign in

After your password, enter the 6-digit code from the app and select Verify. Lost your phone? Select Use a recovery code instead and enter one of your recovery codes; each one works once.

When your company requires it

Your company can name the user groups that must use two-step sign-in (Process settings > Site and sign-in). If you are in one, the next time you sign in you are asked to set it up before you continue, and the card shows Required by your company: you cannot turn it off.

Recovery codes and a lost phone

• New recovery codes creates a fresh set (your old codes stop working). It needs your password and a current code.

• If you lost your phone and your recovery codes, ask an administrator: in Users, the row menu has Reset two-step sign-in. You then sign in with your password, and set it up again if your group requires it.

Common questions

Do the mobile apps ask for the code too? Yes, the updated apps do. Signing in with your fingerprint or face on a phone you already registered does not ask for it.

Why does my company wait before requiring it? An app version from before two-step sign-in cannot show the code step, so administrators turn the requirement on only after everyone has updated the apps.