Two-step verification (2FA)

Two-step verification (also called 2FA or two-factor authentication) adds an extra layer of security to your Inspow account. Besides your password, when you sign in it will ask for a 6-digit code generated by an app on your phone. Even if someone knows your password, they won’t be able to get in without that code.

It’s optional, but highly recommended.

What you need

An authenticator app on your phone. The most common free ones:

• Google Authenticator
• Microsoft Authenticator
• Authy

Any of them works; install the one you prefer before you start.

Turn on two-step verification

1. Open Account (your user menu → Account) and scroll down to the Security → Two-factor authentication section.

   

2. Press Enable 2FA. A QR code will appear.

3. Open your authenticator app and scan the QR code (“Scan code” or ”+” option).

4. The app will show a 6-digit code that changes every few seconds. Type it in the 000000 field and press Enable. If you change your mind, press Cancel.

   

Save your backup codes

When you turn on 2FA, Inspow shows you 10 backup codes only once. Once you have saved them, press I’ve saved my codes.

Danger

Keep them somewhere safe (a password manager, printed, etc.). They are your only way to get in if you lose your phone. They are not shown again.

Each backup code works only once: once used, it can’t be used again.

Sign in with 2FA on

1. Type your email and password as usual.
2. Inspow will ask for the 6-digit code. Open it in your authenticator app, type it and press Verify.
3. If you don’t have your phone at hand, press Use a backup code and enter one of the ones you saved.

Note

The app’s code changes every few seconds. If it gives you an error, wait for a new one to appear and try again. Also make sure your phone’s time is set to automatic: a clock that is out of sync makes the codes not match.

Turn off two-step verification

With 2FA on, the section shows 2FA is enabled on your account. To turn it off, type a code from your authenticator app in Enter a code to disable and press Disable 2FA.

Note

To turn it off you need the 6-digit code from the app: backup codes let you sign in, but they can’t turn off 2FA.

I lost my phone and my backup codes

If you have neither your phone nor your backup codes, you won’t be able to get in on your own: that is exactly what two-step verification prevents. Recovering your password doesn’t remove it either. In that case, contact your Organization: the case is escalated to Inspow support, which will verify your identity before giving you access back. Afterwards you can turn it on again with a new phone.

Tip

To avoid ending up in this situation: save the backup codes when you turn on 2FA and, if you change phones, turn off 2FA (or move the account to the new app) before wiping the old one.