Turning on two-factor authentication

Two-factor authentication is optional and set per person, so each agent decides for themselves. Owners and admins should enable it, and it is strongly recommended for everyone.

Open Settings -> Profile, start the two-factor setup and scan the QR code with an authenticator app such as Google Authenticator, 1Password or Authy. Enter the six-digit code once to confirm, and from then on you are asked for a code after your password at each sign-in.

If you lose your phone, an owner or admin cannot read your codes; you will need to remove and re-enrol the factor from a signed-in session, so keep a second device or your app's backup enabled.

Step by step

1. Open Settings -> Security in your profile.
2. Start the two-factor setup and scan the code with an authenticator app on your phone.
3. Type the six digit code to confirm; the app and your account are now paired.
4. Save the recovery codes somewhere outside your phone, for example in your password manager.

Good to know

• Two-factor protects the whole inbox, not only your account: an agent mailbox contains your customers' data.
• Codes change every 30 seconds and depend on the clock, so if codes are rejected check that the phone time is set automatically.
• Recovery codes are single use. If you lose the phone and the codes, an owner has to help you back in.
• If you sign in with Google, use two-step verification on the Google account instead; it protects EspressoDesk the same way.