Authenticator App Setup & Flow

The Authenticator App feature enables users to secure their accounts using Time-Based One-Time Passwords (TOTP)generated by trusted apps like Google Authenticator, Authy, Microsoft Authenticator, and others. This form of Two-Factor Authentication (2FA) provides an additional layer of security beyond username and password.

Once set up, the authenticator app generates a unique 6-digit code every 30 seconds that users must enter during login, ensuring protection against phishing, SIM-swap attacks, and other threats common with SMS/email-based 2FA.

TABLE OF CONTENTS

• How to setup Authenticator App?
• How to login if I lose access to authenticator App?
• What is backup code and how to generate them?

How to setup Authenticator App?

Step 1: Go to My Profile in the settings (Settings >> My Profile)
Step 2: Click on setup authenticator app.
Step 3: Either scan code via any TOTP app (google authenticator, microsoft authenticator, Authy etc.) or input the code displayed in the app.
Step 4: Input the OTP from the authenticator app to finish the setup.
Step 5: Save the backup codes discreetly to access the system in case app access is lost. In case backup codes are lost or accessed by others, users can reset backup codes from My Profile.
Step 6: Next time a user logs into the system, he will see the option to use an authenticator app for 2FA.

How to login if I lose access to authenticator App?

We currently will display all 2FA options such as SMS, Email & Authenticator app to login. In case user doesn't have access to authenticator App, the user can go ahead with alternative channels.
User can also use backup codes to perform login (each code can be used only once). The backup codes are generated when user sets up Authenticator App.

What are backup codes and how to generate them?

Backup codes are one-time-use codes provided to you during the setup of Two-Factor Authentication (2FA) with an authenticator app. They act as a safety net in case you lose access to your authenticator app or device.

Each backup code can be used in place of the 6-digit TOTP code generated by your authenticator app when logging in.

To regenerate backup codes:
User can go to Settings >> My Profile, and click on option to generate backup code on authenticator app card.