Recovery codes

Pilot

Two-step verification and recovery codes are currently enabled only for pilot organizations. They are not generally available yet. You create new codes on your profile’s Security tab, which is part of the new version of the dashboard.

When you set up two-step verification, Focus shows ten recovery codes. Each one lets you sign in once without your authenticator app, for example when your phone is lost or its battery is empty.

Keep them safe

• The codes are shown only once. Store them in a password manager or print them and keep the paper somewhere safe.
• Anyone who has your password and one of your codes can sign in as you. Do not keep them next to your password.
• A code looks like 7Q2XK-9MH4P. When you type it, upper or lower case and the dash do not matter, and the letters O, I and L are read as the digits 0 and 1.

Sign in with a recovery code

1. Sign in with your password as usual.
2. On the code page, choose Use a recovery code and enter one of your codes.

Each code works once and is then used up. Focus sends you an e-mail that a recovery code was used, so you notice if it was not you. The e-mail also says how many codes are left.

When only a few codes are left

Your profile’s Security tab counts your remaining codes on the Two-step verification card. When only a few are left, the card shows the warning “Only 2 recovery codes left” (with your number) and a New recovery codes button next to it. Create new codes before you run out.

Create new codes

1. Open Profile from your user menu in the top bar, then your profile’s Security tab.
2. On the Two-step verification card, choose New recovery codes.
3. Confirm your sign-in with your code if you are asked to (see confirming sensitive actions).
4. The ten new codes are shown once. Choose Copy or Download (.txt) and store them safely, then choose I saved them.

All of your old codes stop working at once. The new codes are not kept in the dashboard: after you close the window they cannot be shown again, only replaced by another new set.

The error mfa_not_enrolled means two-step verification is not set up on your account, so there are no recovery codes to create. The same error appears when an owner or admin tries to require two-step verification for the organization without having set it up for themselves.

You lost your phone

1. Sign in with a recovery code.
2. If your organizations do not require two-step verification, open your profile’s Security tab, choose Turn off, and set it up again with your new phone (set it up).
3. If an organization requires it, you cannot turn it off. Keep signing in with your recovery codes and write to support@workify360.com from the e-mail address of your account. Support helps you move two-step verification to your new phone.
4. Create new recovery codes if you used several.

If you have neither your phone nor a recovery code, write to support@workify360.com from the e-mail address of your account. Support first checks that the account is yours, which can take some time.