Skip to content
IT Sign in Start free

Turn on two-step verification (2FA)

Protect your account with a 6-digit code from an authenticator app on top of your password, plus recovery codes.

Where to find it
Settings → Users and sign-in → Two-step verification

Open in Nanus

What it is for

With two-step verification your password alone is not enough to sign in: you also need a code that changes every 30 seconds, generated by an authenticator app on your phone (for example Google Authenticator, Microsoft Authenticator or 1Password). Someone who finds out your password cannot get in without your phone.

It applies to accounts: the cloud and the accounts colleagues use to sign in over the local network of a desktop app. Each person turns it on for themselves and it applies in every company they work in.

How to turn it on

  1. Open Settings → Users and sign-in → Two-step verification: the status is Off.
  2. Enter your Current password and tap Turn on.
  3. Scan the QR code with your authenticator app. If you can’t, type in the key shown under Can’t scan it? Enter this key manually:.
  4. Enter the 6 digits shown by the app in App code and tap Confirm and turn on.
  5. The Recovery codes appear: tap Copy codes, keep them somewhere safe and then tap I’ve saved them.

Recovery codes are shown only once. There are 10, each works once and lets you in if you lose your phone.

Signing in with the code

After email and password, Two-step verification appears: enter the app’s 6 digits, or one of your recovery codes, in Verification code and tap Verify and sign in. The code is also needed when you accept an invitation with an account that has verification on. If you sign in with a passkey no code is needed, because only your device can use it.

New codes and turning it off

When verification is on, the section shows On since with the date and how many recovery codes you have left. The two actions below need your Current password and an App code (or a recovery code):

  • New recovery codes: generates 10 new ones; the previous ones stop working.
  • Turn off: removes verification, and from then on the password is enough.

Lost phone

  • Sign in with one of your recovery codes, then turn verification off and on again with the new phone.
  • If you also lost the codes, the company owner can use Reset verification next to your name in Settings → Users and sign-in → Team members: you can then sign in with just the password and turn it on again. If you also work in companies they don’t own, only the owner of each company can reset it.
  • The owner cannot reset their own verification: that is why you should keep your recovery codes carefully.

Common problems

  • Invalid code. Check your phone’s clock and try again.: the code depends on the time; set automatic date and time on your phone.
  • More than 10 minutes have passed: start again.: more than 10 minutes passed between Turn on and Confirm and turn on.
  • Too many failed attempts. Try again in 15 minutes.: after too many wrong codes you have to wait a quarter of an hour.

The company Activity log records turning verification on and off, new recovery codes and sign-ins with a recovery code.

Frequently asked questions

Which authenticator app can I use?

Any app that reads QR codes for time-based codes, for example Google Authenticator, Microsoft Authenticator or 1Password.

Is the code also needed in the desktop app connected to the cloud?

Yes: you sign in on the cloud page, where you enter your password and the code.

See also