Two-step verification
A six-digit code from an authenticator app on top of your password, with recovery codes for the day you lose your phone.
#Turning it on
- Open Settings and find Two-step verification. Press Set up two-step verification.
- Scan the square with any authenticator app — 1Password, Authy, Google Authenticator, Microsoft Authenticator — or type the key shown beneath it.
- Enter the six-digit code the app gives you and press Turn on.
- Write down the ten recovery codes. They are shown once and never again.
#Signing in afterwards
After your password, Auddomate asks for the current six-digit code. Codes change every thirty seconds and each one can be used once. If you have lost your phone, type one of your recovery codes in the same box instead — it signs you in and is then spent.
#Recovery codes
Settings shows how many you have left and can issue ten fresh ones at any time, which retires the old set. Keep them where you keep other credentials, not on the phone that holds the app.
#Requiring it of everyone
An owner can switch on Require two-step verification for everyone in this organisation. Turn it on for yourself first. From then on, anyone in the organisation who has not set it up is asked to do so before they can open anything, and nobody in the organisation can turn theirs off while the requirement stands.
Where your organisation uses single sign-on, your identity provider decides what a sign-in requires — set two-step verification there rather than here. People who sign in that way are marked SSO on the Team page.