Two-step sign-in

Protect your account with a code from an Authenticator app on your phone in addition to your password, and use backup codes.

When two-step sign-in is enabled, after your password you are also asked for the 6-digit code from the Google Authenticator or Microsoft Authenticator app on your phone. Even if your password is stolen, no one can access the account without your phone.

Two-step sign-in is required for admins and the superadmin — the system does not open until it is set up. For other users the admin can make it required in the user card. More: the “Security” article.

Enabling two-step sign-in

Install Google Authenticator or Microsoft Authenticator on your phone.

In the CRM, click your name in the top right and select “Two-step sign-in”.

Click “Set up”.

Scan the QR code in the Authenticator app. If scanning does not work, enter the key shown in the window into the app manually.

Enter the 6-digit code shown by the app and click “Confirm and turn on”.

Copy the “Recovery codes” list with “Copy” and keep it in a safe place, then click “Close”.

Signing in with a code

Enter your email and password and click “Sign in”.

Enter the current code from the Authenticator app, or one of your backup codes, in the “Verification code” field.

Click “Verify”. To go back, use the “← Back” button.

Turning off two-step sign-in

Open the “Two-step sign-in” window from the profile menu.

Enter the current code or a backup code.

Click “Turn off”.

Rules

When you enable it, you get 8 backup codes. Each code works only once, and the codes are not shown again; the window shows how many backup codes remain.

You must enter the code within 5 minutes after your password; otherwise, start signing in again.

After 5 wrong codes, you must wait 5 minutes.

Two-step sign-in is always required for admins and the superadmin — the system does not open until it is set up, and it cannot be turned off. For other users, the admin can tick “Two-step sign-in is required” in the user card.

If a user loses their phone, the admin resets their two-step sign-in on the “Users” page with the “Reset two-step sign-in” button.

In the user list, a shield icon appears next to employees who have two-step sign-in enabled.

Keep your backup codes somewhere other than your phone (for example, in a password manager or on a printed sheet). If you lose your phone, you can sign in with them.