Two-factor authentication

With two-factor authentication, Qyveno asks for a code from an app on your phone after your password. Knowing your password is then not enough to get in. It works with apps such as Google Authenticator, Microsoft Authenticator, 1Password and Authy.

Turn on two-factor authentication

1. Click your avatar in the top right and choose My profile.
2. Click Security.
3. Click Set up two-factor authentication.
4. Confirm with your current password and click Next.
5. Scan the QR code with your authenticator app. If scanning does not work, type the key below the code into the app.
6. Enter the 6-digit code the app shows now and click Verify.
7. You now see your recovery codes. Save them with Download or Copy and click I have saved them.

Two-factor authentication is now on. You are signed out on your other devices.

Sign in with a code

After your password, Qyveno asks for the code from the app. A 6-digit code goes through by itself as soon as you have typed it. Each code works only once.

Leave Remember this device for 30 days on if it is your own device. Qyveno then does not ask for a code there for 30 days, only your password.

You find remembered devices in My profile › Security, under Remembered devices. Forget removes one, Forget all removes them all. Changing your password also forgets them.

Recovery codes

You get ten recovery codes. Each one works once, instead of a code from the app. Handy when you do not have your phone with you.

1. On the sign-in screen, click Use a recovery code.
2. Enter one of your recovery codes and click Verify.

When you have three or fewer left, Qyveno tells you after you sign in. Create new ones with New recovery codes in My profile › Security. You need a code from the app for that. All your old codes stop working.

Lost both your phone and your recovery codes? Ask your admin to reset your two-factor authentication. Then set it up again.

Turn it off

In My profile › Security, click Turn off. Confirm with your password and a code from the app or a recovery code. Your remembered devices are forgotten.

If your organization requires two-factor authentication, you cannot turn it off.

Require it for your organization

As an admin, you can make two-factor authentication required for everyone.

1. Turn it on for your own account first. Otherwise you would lock yourself out.
2. Click your avatar, choose Administration and open Security.
3. Turn on Require two-factor authentication.

You see who does not have it yet. Those people get a screen to set it up before they can continue. In Administration › People, a shield shows who has it on.

Has a colleague lost their phone and recovery codes? In Administration › People, open the menu next to that person and choose Reset two-factor. This only works if that person is not a member of another organization.