Set up two-factor authentication

Your role requires a second factor. Enrol an authenticator app to continue.

Save your recovery codes now. Each one works a single time if you ever lose your authenticator. They are shown only once.

{{RECOVERY}}

Continue {{/RECOVERY}} {{#INTRO}}

You will add a time-based one-time code (TOTP) from an authenticator app (Google Authenticator, Authy, 1Password, …) as a second factor at sign-in.

1. Add this secret to your authenticator app (manual / "enter a setup key"):

{{SECRET}}

Issuer OgmaProtect, account {{USERNAME}}, SHA1 / 6 digits / 30s. Provisioning URI: {{OTPAUTH_URI}}

2. Enter the current 6-digit code to confirm and enable:

Codes are checked against this box's clock, not your phone's. If the box clock is wrong by up to a day, a correct code is refused and the message above says by how much — that needs an administrator to fix; retrying will not help.