How to turn on two-step verification with an authenticator app
In Settings › My Profile › Security, open the authenticator app setup, scan the QR code with the app on your phone, enter the code it generates and save your backup codes.
Updated on
Before you start
- Install an authenticator app that supports time-based codes (TOTP) on your phone, such as Google Authenticator, Microsoft Authenticator or Authy.
- Each person sets up their own account: an admin can't do it for another user.
- Have a safe place to store your backup codes (a password manager or a piece of paper kept somewhere secure).
Where to find it
Settings › My Profile › Security › Two-Factor Authentication
Step by step
- Open Settings and click My Profile.
- Open the Security tab.
- In the Two-Factor Authentication section, open the authenticator app setup.
- On your phone, open the authenticator app and add a new account by scanning the QR code on the screen. If you can't scan it, type the setup key shown into the app.
- The app will show a 6-digit code that changes every few seconds. Enter the current code in Elooo CRM and confirm.
- Save the backup codes that appear. Ten are generated at a time and each one can be used only once.
- From now on, when sign-in asks for verification, choose the authenticator app option and enter the code the app shows.
Tips
- Keep your backup codes separate from your password and never share them.
- If your backup codes are used up, lost or exposed, generate a new set in My Profile › Security.
- The authenticator app can also confirm sensitive changes, such as changing your login email.
Common problems
- The code from the app is rejected → Make sure you're using the right account in the app and enter the code before it changes. Check that your phone's time is set automatically.
- I lost my phone or deleted the app → Sign in with one of your backup codes and set up the authenticator app again in Security.
- I have no backup codes and no access to the app → Ask an account admin or Elooo CRM support for help.
- I tried to set up the app for a teammate and it didn't work → Only the user themselves, signed in to their own account, can set up the authenticator app.
Frequently asked questions
Can I use any authenticator app?
Yes, any app that supports time-based codes (TOTP), such as Google Authenticator, Microsoft Authenticator or Authy.
Why is this safer than an SMS code?
The code is generated on your phone and doesn't depend on SMS delivery, which reduces risks such as SIM-swap attacks.
Was this helpful?
Thanks for your feedback.
