How do I turn on two-factor authentication?

You set up two-factor authentication in Profile > Two-factor authentication. Once it is on, Canicompet asks for your password and also for a 6-digit code generated by an authenticator app on your phone.

What you need

An authenticator app on your phone. These apps are free, work without an internet connection, and any of them will do. The screen suggests several, for example Google Authenticator, Microsoft Authenticator, Authy, FreeOTP, 1Password or Bitwarden. Your password manager or your phone’s keychain may already be able to do it.

Turn on two-factor authentication

1. Open the Profile tab, then tap Two-factor authentication (Account section).
2. In Protect your account, enter Your password.
3. Tap Enable two-factor authentication.
4. The Scan this QR code screen appears. Open your authenticator app and scan the QR code.
5. If you cannot scan it, type in the key shown under the QR code by hand. Tap the key to copy it.
6. Enter the code shown by your app in 6-digit code.
7. Tap Confirm.

Keep your recovery codes

Right after you turn it on, the Your recovery codes screen shows 10 codes. They are shown only once.

1. Write the codes down or tap Copy the codes, then keep them somewhere safe (not on your phone).
2. Tick I have written down these codes and stored them safely.
3. Tap Done.

Caution

Recovery codes are the only way to log in if you lose your phone. Each code works only once.

Log in with two-factor authentication

After your email and password, enter the code from your app in Verification code, then tap Verify. Without your phone, enter a recovery code in the same field.

Manage two-factor authentication

When it is on, the screen shows Two-factor authentication is enabled on your account. and the number of Recovery codes left.

In Settings, every change asks for Your password and a 6-digit code from your app:

• Generate new recovery codes: replaces your codes with a new set of 10 codes, to note down in the same way.
• Disable two-factor authentication: after you confirm (Yes), your account is protected by your password only.

Note

Accounts with administration rights must turn on two-factor authentication to access the administration site, and cannot turn it off. They can still use the app without it. When such an account logs in without having turned it on, it is sent to this screen.

Common problems

“Incorrect password.” The password you entered does not match your account. It is needed to turn the feature on, generate new codes or turn it off.

“The verification code is incorrect or has expired.” Enter the code currently shown in the app. If this keeps happening, check that your phone’s clock is set automatically.

“The setup has expired, please start again.” You waited too long between scanning and confirming. Tap Cancel and start again.

“Too many attempts. Please wait a few minutes before trying again.” Too many wrong codes were entered. Wait a few minutes.

I have lost my phone. Log in by entering a recovery code in Verification code. If you have no recovery codes left, contact the Canicompet team through the Contact page.