Turn on two-factor authentication

Two-factor authentication adds a second step to signing in. Besides your password you also type a 6-digit code from an authenticator app on your phone. Even if someone steals or guesses your password, they still cannot get in.

It is recommended for everyone, and especially for administrators.

What you need

An authenticator app on your phone. Any standard app that makes 6-digit codes works.

Turn it on

1. Open Settings and choose Security.
2. Find Two-factor authentication is off and choose Turn on.
3. In your authenticator app, add an account by scanning the square code on the screen.
4. If you cannot scan it, choose "enter a setup key" in the app and type the key shown under Or enter this key. Use Copy key to copy it. Keep the key private: anyone who has it can make your codes.
5. Enter the 6-digit Code from the app and choose Confirm.
6. Save your backup codes. They are shown once. Use Copy codes, then store them somewhere safe outside this mailbox. Each one works a single time if you lose your phone.

From now on, signing in asks for your password and then a code.

Sign in

1. Enter your email and password as usual.
2. When asked, open your authenticator app and type the current 6-digit code. Codes change every 30 seconds or so.

Lost your phone?

Use one of your backup codes in place of the 6-digit code. Each works once. After you are back in, turn two-factor authentication off and on again to set up your new phone and get a fresh set of backup codes. If you have no backup codes left, ask your administrator for help.

Turn it off

1. Open Settings, Security.
2. Under To turn it off, enter a current code, type a code from your app.
3. Choose Turn off.

Good to know

• Two-factor authentication protects signing in to PGB Business. Mail apps on your phone or computer sign in separately; use an app password for those. See the article on setting up a mail app.
• Setting it up again on a new phone is quick, as long as you can reach your old codes.

Tips

• Store backup codes in a password manager or print them and keep them somewhere safe.
• Do not take a photo of the setup square and leave it in your camera roll.
• Set up a recovery email too, so you can reset a forgotten password. See the article on passwords and sessions.

Common problems

• My code is rejected. Check that the time on your phone is set automatically, and enter the newest code.
• I scanned the code but nothing shows. Add it manually with the setup key.
• I lost my phone and my backup codes. Ask an administrator to help you regain access.