Use case: you want to make sure nobody can sign in to your ManyRequests account with just your password. With two-factor authentication (2FA) turned on, you also enter a six-digit code from an authenticator app every time you sign in.
2FA is available to everyone with a ManyRequests account: admins, team members and clients. Each person turns it on for their own account. You need an authenticator app on your phone, such as Google Authenticator or 1Password.
How to turn on two-factor authentication
Click your name at the bottom of the left sidebar, then click Your profile. You can also go to Settings > Profile and account.
Open the Security tab. Under Two-factor authentication, click Enable two-factor authentication.
If you are asked to Confirm your password, type your password and click Confirm.
In the Set up two-factor authentication window, scan the QR code with your authenticator app. If you can't scan it, use the setup key under Can't scan it? Enter this setup key manually: click Copy and paste it into your app. Then click Continue.
Type the six-digit code your app shows into Authentication code and click Confirm and enable.
The window now shows your recovery codes. Click Copy codes and save them somewhere safe, such as your password manager. Then click Done.
The Two-factor authentication section now shows Enabled.
Good to know: 2FA is only switched on once you confirm a code. If you close the window before that, nothing changes and you can start again.
Signing in with 2FA
After you enter your email and password, ManyRequests asks for the six-digit code from your authenticator app. Type the code that your app shows right now and click Continue.
If you lose your phone
On the sign-in code screen, click Use a recovery code instead and enter one of your saved recovery codes. Each code works only once. Once you are signed in, turn 2FA off and on again to connect your new phone.
Manage your recovery codes
Once 2FA is on, the Security tab shows a Recovery codes section:
Show recovery codes displays your codes (you may need to confirm your password first). Copy codes copies them.
Regenerate codes creates a new set. All your old codes stop working, so save the new ones right away.
How to turn off two-factor authentication
Go to Your profile > Security.
Click Disable two-factor authentication and confirm your password if asked.
You will get an email letting you know that 2FA was turned off. If you didn't do this, change your password and turn 2FA back on right away.
Other security settings
The same Security tab is where you change your Password. Under Browser sessions you can click Log out other browser sessions to sign out everywhere except the device you are using.