A password can be guessed or stolen. A second step means a thief also needs your phone.
Turn it on
- Go to Settings → Account and open Password & two-step.
- Under two-step sign-in, press Set up.
- Scan the QR code with an authenticator app, or type the key shown.
- Enter the six-digit code the app shows.
- Save your ten backup codes somewhere safe, such as a password manager. Each works once.
A code is accepted once, so if you try again straight away, wait for the next code to appear.
Signing in
From then on, signing in asks for a code after your password. This also applies to sign-in with Google or Microsoft and to password-reset links.
If you lose your phone
- Sign in with one of your backup codes.
- Turn two-step off, then on again, to link the new phone.
If the backup codes are gone as well, ask an owner of the workspace to contact support.
Alerts
Frosvo emails you when your account is signed in from a device it has not seen before, when a backup code is used, and when your password or two-step settings change. If it was not you, change your password and keep two-step on.
For owners
Owners are emailed when two-step is turned off for someone. Every change is recorded in the audit log.
Related
Read the account security overview, and see single sign-on for company-wide sign-in. The team guide explains who can do what.
Common questions
Can I use it on my phone and my computer? Yes. Your authenticator app produces the code, and any device you sign in on asks for it.
Is two-step required? It is optional, but strongly recommended for owners.
Where do I turn it off? In the same place you turned it on, under your account settings.