Two-Factor Authentication

Two-factor authentication (2FA) adds a second step when you sign in to Resool: after your password, email code or Google sign-in, you enter a 6-digit code from an authenticator app on your phone. Even if someone gets hold of your password, they can't get into your account without your phone. 2FA is set per person and protects your account in every workspace you belong to.

#Before you begin

• Install an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, 1Password or Authy.
• Have a safe place ready for your recovery codes, like a password manager.

#How to turn on two-factor authentication

1. Click the Settings icon in the left rail and choose Personal settings.
2. On the Profile tab, under Two-factor sign-in, turn on Enable two-factor authentication (2FA). The Set up two-factor sign-in dialog opens.

Screenshot placeholder

Settings › Personal settings › Profile tab › Enable two-factor authentication (2FA)

The "Set up two-factor sign-in" dialog with the two steps (Connect the app, Confirm), the QR code, the "Get an authenticator app" and "Scan the QR code" instructions, the manual key with its copy button, and the 6-digit code boxes.

File: screenshots/two-factor-authentication-setup.png

1. In your authenticator app, tap + and scan the QR code. If you can't scan it, use the key under "Can't scan? Enter this key instead:" (click the copy button to copy it).
2. Under Enter the 6-digit code from the app, type the code your app shows. It checks automatically when you type the sixth digit, or you can click Turn on. The code changes every 30 seconds, so use the current one.
3. You see Two-factor sign-in is on and your 10 recovery codes.

#How to save your recovery codes

Recovery codes let you sign in if you lose your phone. Each code works once, and they won't be shown again.

1. Click Copy or Download to save the codes. Download saves a text file named resool-recovery-codes.txt.
2. Store them somewhere safe and private, like a password manager. Anyone with a code can get past this step.
3. Tick I've saved my recovery codes and click Done.

Screenshot placeholder

Settings › Personal settings › Profile tab, after confirming the 2FA code

The "Two-factor sign-in is on" screen with the "Save your recovery codes" box listing 10 codes in two columns, the Copy and Download buttons, the warning note, the "I've saved my recovery codes" checkbox ticked, and the Done button.

File: screenshots/two-factor-authentication-recovery.png

#How to sign in with two-factor authentication

1. Sign in as usual with your password, an emailed sign-in code or Google.
2. On the Enter your code screen, open your authenticator app and type the 6-digit code. It checks automatically; you can also click Verify.

If you don't have your phone, click Use a recovery code, enter one of your saved codes in Recovery code and click Verify. That code can't be used again. To go back, click Use the authenticator app.

Screenshot placeholder

Sign-in page, after entering email and password, for an account with 2FA on

The "Enter your code" screen with "Open your authenticator app and enter the 6-digit code.", the 6-digit code boxes, the Verify button, and the "Use a recovery code" and "Back to sign in" links.

File: screenshots/two-factor-authentication-sign-in.png

#How to turn off two-factor authentication

1. Go to Settings › Personal settings and, on the Profile tab, turn off Enable two-factor authentication (2FA).
2. In the Turn off two-factor sign-in? dialog, enter a 6-digit code from your app, or click Use a recovery code and enter one.
3. Click Turn off.

Your account is then protected by your password only.

#Notes and limitations

• 2FA works with any authenticator app that supports standard time-based codes (TOTP). Codes sent by SMS or email aren't used for 2FA.
• You get 10 recovery codes. Each one works only once.
• To get a fresh set of recovery codes, turn 2FA off and on again. Your old codes stop working.
• After you enter your password, you have a few minutes to enter the 2FA code; if the screen expires, sign in again.

#FAQ and troubleshooting

#Resool says my code is wrong. What can I do?

• Use the code currently shown in the app; codes change every 30 seconds.
• Check that your phone's date and time are set automatically. A clock that's off by even a minute can produce wrong codes.
• Make sure you're reading the Resool entry in your authenticator app, not another account.

#I lost my phone. How do I sign in?

On the Enter your code screen, click Use a recovery code and enter one of your saved codes. Then set up 2FA again on your new phone: turn it off and on in your profile.

#I lost my phone and my recovery codes. What now?

Contact Resool support from the email address on your account and explain that you've lost access to your authenticator app and recovery codes.

#Does 2FA apply to all my workspaces?

Yes. 2FA is part of your personal account, so it protects every workspace you can access.

#Do I need 2FA if I sign in with Google?

Google sign-in also asks for your Resool 2FA code when 2FA is on. It's still worth turning on, because it protects your Resool account even if your email or Google account is compromised.

#What's next?

• Profile Settings
• Audit Log
• Roles and Permissions
• Setting Up Your Resool Account