How to turn on two-factor authentication

How to turn on two-factor authentication#

For: Manager | Shift worker | Admin You’ll need: Your password, and an authenticator app on your phone or computer.

Two-factor authentication adds a second step to signing in: your password, then a six-digit code from an authenticator app. Someone who learns your password still can’t get in. It’s off by default and you switch it on for yourself — there’s no company-wide setting.

Note

Two-factor authentication protects your account, not one company. Switch it on once and it applies everywhere you sign in to Shiftavo — the web app, the mobile apps, and every company you belong to.

Get an authenticator app#

Install one on the device you’ll have with you when you sign in. Any app that generates time-based codes works — Google Authenticator, Microsoft Authenticator, 1Password, Bitwarden, Aegis, or the password manager you already use.

Switch it on#

  1. Open the account menu (top-right) and click ‘Account’.

  2. Click the ‘Two-factor authentication’ card.

  3. On the ‘Authenticator app’ card, click ‘Activate’.

  4. Enter your password on the ‘Confirm access’ screen and click ‘Confirm’.

  5. Scan the QR code with your authenticator app.

  6. Enter the six-digit code your app shows in the ‘Authenticator code’ field.

  7. Click ‘Activate’.

Tip

Can’t scan the QR code — for example because you’re setting this up on the same device? Copy the ‘Secret key’ shown under the QR code and type it into your app by hand instead.

Save your recovery codes#

Activating an authenticator app also creates ten recovery codes, and Shiftavo shows them to you right away. Each one signs you in once, for the day you don’t have your phone.

  1. Click ‘Download’ to save them as a text file, or copy them.

  2. Store them where you’d store a password — a password manager, or somewhere locked that isn’t the phone holding the authenticator app.

  3. Click ‘Done’.

You can look them up again later — see How to manage your recovery codes.

Verify it worked#

The ‘Two-factor authentication’ page shows an ‘On’ badge on the ‘Authenticator app’ card, and the account page shows the same badge on the ‘Two-factor authentication’ card. You’ll also get an email confirming that an authenticator app was activated.

Sign out and back in once to see the new step — Shiftavo asks for a code after your password.