# Set up two-step sign-in with an authenticator app

Source: https://frosvo.com/docs/two-step-sign-in
Updated: 2026-10-22

Protect your account with a six-digit code from an authenticator app and ten backup codes. It applies to passwords, Google, Microsoft and password-reset sign-ins.

A password can be guessed or stolen. A second step means a thief also needs your phone.

## Turn it on

1. Go to **Settings → Account** and open **Password & two-step**.
2. Under two-step sign-in, press **Set up**.
3. Scan the QR code with an authenticator app, or type the key shown.
4. Enter the six-digit code the app shows.
5. **Save your ten backup codes** somewhere safe, such as a password manager. Each works once.

A code is accepted once, so if you try again straight away, wait for the next code to appear.

## Signing in

From then on, signing in asks for a code after your password. This also applies to sign-in with Google or Microsoft and to password-reset links.

## If you lose your phone

1. Sign in with one of your backup codes.
2. Turn two-step off, then on again, to link the new phone.

If the backup codes are gone as well, ask an owner of the workspace to contact [support](/docs/support).

## Alerts

Frosvo emails you when your account is signed in from a device it has not seen before, when a backup code is used, and when your password or two-step settings change. If it was not you, change your password and keep two-step on.

## For owners

Owners are emailed when two-step is turned off for someone. Every change is recorded in the [audit log](/docs/audit-log).

## Related

Read the [account security overview](/docs/security), and see [single sign-on](/docs/single-sign-on) for company-wide sign-in. The [team guide](/docs/team) explains who can do what.

## Common questions

**Can I use it on my phone and my computer?** Yes. Your authenticator app produces the code, and any device you sign in on asks for it.

**Is two-step required?** It is optional, but strongly recommended for owners.

**Where do I turn it off?** In the same place you turned it on, under your account settings.

## Common questions

### Which authenticator apps work?

Google Authenticator, Microsoft Authenticator, 1Password, Authy and other standard apps. You can also type the key shown instead of scanning the code.

### What if I lose my phone?

Sign in with a backup code, then turn two-step off and on again to set up the new phone.

### What if I lost the backup codes too?

Ask an owner to contact Frosvo support.

### Does it also protect Google and Microsoft sign-in?

Yes. Signing in with a password, Google, Microsoft or a password-reset link all ask for the code.