Two-Step Verification (2FA)
Protect your ZenFlip account with a code from an authenticator app at sign-in. Free on every plan.
Two-Step Verification (2FA)
Two-step verification adds a second check when you sign in to your ZenFlip dashboard: after your password, you enter a 6-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in without your phone.
It is free on every plan, and it is off until you turn it on.
Turn it on
Go to Settings → Security.
Click Turn on two-step verification.
Scan the QR code with an authenticator app, such as Google Authenticator, Microsoft Authenticator, 1Password or Authy. If you can't scan it, type the setup key shown under the code instead.
Enter the 6-digit code from your app to confirm. The code changes every 30 seconds.
Save your recovery codes. You get 10, and each one works once. Keep them somewhere you can reach without your phone, such as a password manager.
From then on, ZenFlip asks for a code each time you sign in with your password or with Google.
Signing in
After your password (or after choosing Continue with Google), enter the current code from your authenticator app. If you don't have your phone, enter one of your unused recovery codes instead.
If you belong to more than one organization with the same email address, two-step verification covers all of them: it belongs to you, not to one organization.
If your organization uses single sign-on
If you sign in through your organization's identity provider (SAML or OpenID Connect single sign-on, an Enterprise feature), ZenFlip does not ask for a separate code. Your identity provider applies its own multi-factor rules, such as Okta Verify or Microsoft Authenticator.
New recovery codes
On Settings → Security, click Generate new codes and confirm with a code from your app. Your old recovery codes stop working at once, so save the new set.
Turning it off
On Settings → Security, turn two-step verification off and confirm with a code from your app or a recovery code. ZenFlip asks for the code so that someone using your signed-in browser cannot switch it off.
Lost your phone and your recovery codes?
Contact support@zenflip.io from the email address on your account.