Turning on two-factor authentication
Two-factor authentication adds a second proof to your password: a 6-digit code shown by an app on your phone. If someone finds out your password, they cannot get in without this code. By the end of this page, you will know how to turn it on, choose when the code is requested and regain access if you lose your phone.
Prerequisites
Section titled “Prerequisites”- An authenticator app on your phone: Google Authenticator, Authy or another TOTP-compatible app (temporary 6-digit codes).
- Being signed in to SynkriaOps.
Turning on two-factor authentication
Section titled “Turning on two-factor authentication”-
Click your avatar at the top right, then Security and access.
-
In the Two-factor authentication section, TOTP app line, click Enable.
-
Scan the QR code with your authenticator app. If the app is on the phone you are using to read the screen, copy the Setup key and, in the app, choose “Enter a setup key”.
-
Enter the 6-digit code shown by the app to confirm.
-
The Backup codes appear. Click Copy the codes and store them somewhere safe, away from your phone, then click Done.
The line now shows Enabled and the number of backup codes left.
Choosing when the code is requested
Section titled “Choosing when the code is requested”In the Two-factor authentication section, When to ask for the code block:
| Choice | The code is requested… |
|---|---|
| Only on a new device (recommended) | On any unknown device, after 3 days without using the device, and at least every 30 days |
| At every sign-in | Every time you enter your password, on all your devices |
Signing in with two-factor authentication
Section titled “Signing in with two-factor authentication”After the password, the Two-factor verification screen asks for the app code. On your personal computer, tick Don’t ask for a code on this device again: it becomes a trusted device for 30 days, as long as you use it at least every 3 days. Do not tick this box on a shared computer.
Without your phone, click Use a backup code and enter one of your codes.
Managing trusted devices
Section titled “Managing trusted devices”The Trusted devices section lists the devices on which the code is no longer requested, with the date the code was last entered. Forget removes a device; Forget all devices makes the code be requested everywhere again. Forget a device that is lost, sold or lent.
Confirming your identity before a sensitive action
Section titled “Confirming your identity before a sensitive action”Some actions (creating an agent key for an AI assistant, changing access rights…) show Confirm your identity. Depending on your account, enter your current password, the code from your authenticator app or a code received by email. The confirmation stays valid for 5 minutes.
Turning off two-factor authentication
Section titled “Turning off two-factor authentication”In the Two-factor authentication section, click Disable and enter your current code to confirm. Your account then depends on your password alone: the Protection and advice section points this out.
Without two-factor authentication
Section titled “Without two-factor authentication”Even without two-factor authentication, SynkriaOps sends a 6-digit code to your account’s email address when a sign-in looks unusual (new device on a new network, new country, recent failures). This protection does not replace two-factor authentication: anyone with access to your mailbox can read the code.
Frequent messages
Section titled “Frequent messages”| Message | Cause | Solution |
|---|---|---|
| ”Invalid or expired code” | Code from another entry in the app, or phone clock out of sync | Check that the phone uses automatic time and enter the code shown |
| ”Too many attempts. Wait a minute before trying again.” | Several wrong codes | Wait one minute |
| ”No backup codes left” | All the codes have been used | Regenerate them as soon as you are signed in |