Two-factor authentication
Requiring a 6-digit code after the password: how to enable it, keep your backup codes, and what to do if you no longer have your phone.
In addition to your password, signing in requires a 6-digit code displayed by an app on your phone. If your password is ever leaked, no one can get in without the phone. It’s optional: you can enable and remove it whenever you like.
Enabling it
- Install an authentication app on your phone: Google Authenticator, Microsoft Authenticator, Authy, 1Password, or Apple’s Passwords app. Any of them will do.
- In Global settings, on the Two-factor authentication card, click Enable two-factor authentication, then Start: a QR code appears.
- Scan it with the app: a “WebAcappella Tempo” entry appears, along with a 6-digit code.
- Type this code on the page and click Enable two-factor authentication. Until this first code is confirmed, nothing changes about how you sign in.
- The page displays your ten backup codes: copy or print them straight away, as they will never be shown again.
Signing in
After the password, a second page asks for the code from the app; you have five minutes to enter it. Code rejected? It changes every 30 seconds and can only be used once: type the one displayed right now. If the problem persists, check that your phone’s time is set automatically.
Backup codes
A backup code replaces the app’s code when you don’t have your phone to hand: it is accepted on the sign-in page instead of the usual code. Each of the ten codes can only be used once. The Security page shows how many are left; you can generate ten new ones at any time by typing the current code from the app, after which the old ones stop working.
Lost or replaced phone
- New phone, old one still works: on the Security page, disable it using a code from the old phone, then start the activation again with the new one.
- Lost phone: sign in with a backup code, then disable and re-enable it with the new phone.
- No phone and no backup codes: write to us from the Contact us page. We will verify your identity before removing two-factor authentication from your account.
Disabling it
On the Security page, type the current code from the app and click Disable two-factor authentication. Signing in will then only require your password, and the backup codes are cancelled.