Two-factor authentication

Two-factor authentication adds a second step to signing in. After your password or Google account, Zappush asks for a 6-digit code from an authenticator app on your phone, such as Google Authenticator, 1Password or Authy. Someone who learns your password still cannot get in.

Turn it on

1. Open Settings → Your account → Profile and find Two-factor authentication.
2. Click Turn on.
3. Scan the QR code with your authenticator app, or type in the key shown beside it.
4. Enter the 6-digit code the app shows. Two-factor turns on only once this code is accepted, and we email you to confirm.
5. Save your 10 recovery codes. Copy or download them; you will not see them again.

Signing in

After your password or Google sign-in, enter the current code from your app. Each code works once. If you get the code wrong 10 times in 15 minutes, the code step pauses for 15 minutes.

Lost your phone

On the code step, click Lost your device? Use a recovery code and enter one of your recovery codes. Each recovery code works once, and we email you when one is used.

If you have no recovery codes left, contact Zappush support. After confirming who you are, support can reset two-factor on your account. You are signed out everywhere and emailed when that happens. Your organization's admins cannot reset it for you.

New recovery codes or turning it off

From the same card, Make new recovery codes replaces your old ones, and Turn off removes two-factor. Both ask for a current code, and we email you when either happens. You cannot turn it off while your organization requires it.

Require it for your organization

Admins can turn on Require two-factor authentication in Settings → Organization → General. Turn it on for your own account first. Members who do not have it are taken to setup the next time they open the console, and can finish it on their own.

Turning two-factor on or off, support resets, and changes to the organization requirement all appear in the organization's audit log.