Two-step verification
Turns on and off the second step that, when you sign in with email and password, asks for the 6-digit code from your authenticator app as well as your password, and manages your recovery codes.
For: Member, Platform administrator, Account administrator, Tenant administrator
Turning it on
- Press Enable. A QR code appears on the screen.
- Scan the QR code with Google Authenticator, 1Password or a similar app.
- Enter the 6-digit code the app shows and press Verify and enable.
- Save the 10 recovery codes shown on screen (format:
XXXX-XXXX) somewhere safe, then press I've saved them, continue.
Keep in mind Recovery codes are shown only at the moment they are generated; they can't be viewed later. Each code is valid for a single sign-in.
What you can do while it's on
| Action | Which code it accepts | Result |
|---|---|---|
| Get new recovery codes | Only the current code from the authenticator app | 10 new codes are generated; unused old codes stop working. |
| Disable MFA | An authenticator code or a recovery code | The second step is turned off; the remaining recovery codes stop working. |
Keep in mind Although the code field is labelled "Authenticator code or recovery code", a recovery code isn't accepted for getting new recovery codes; you get an Invalid code warning. If you lost your phone, sign in with a recovery code, turn verification off, and set it up again with the new app.
Good to know
- The code is asked for only when you sign in with email and password; signing in with Google, Microsoft or LinkedIn asks for no extra code.
- At sign-in you can also enter one of your recovery codes in the code field.
- This setting is only for your own account and needs no permission. Today the console doesn't ask for a code at sign-in unless you turned verification on yourself.
Turning verification on and recovery code events appear in My Activity › Security events; turning it off leaves no trace there.