What can I reach, and how do I turn on two-factor auth?

My access just shows you where you stand. It lists the companies you belong to and the role you hold in each. If you're an admin, it also links to the people who can see what you see. If something looks off, check there before you ask anyone.

Two-factor auth adds one step to signing in: after your password, you type a six-digit code from an app on your phone. Turn it on under Two-factor auth in your account settings. Scan the code with any authenticator app, type in the six digits it shows, and you're set.

Your firm's administrator can make two-factor required — for administrators and managers, or for everyone on the staff — from Settings → Security & two-factor. If it's required and you haven't set it up, Veristep takes you to the set-up screen first, and while it's required you can't turn it off.

Plan for losing your phone before it happens. When you turn two-factor on, you get ten backup codes, shown once: copy them or download them as a text file, and keep them somewhere other than your phone. Each code works once. If you lose the phone, sign in with your password, choose "Lost your phone? Use a backup code" and enter one. That removes your old authenticator, and you sign in again and set up two-factor on the new phone, which gives you a fresh set. Veristep emails you whenever a backup code is used.

Your two-factor page shows how many backup codes you have left and lets you make a new set at any time (the old set stops working). You need to have signed in with your authenticator code to make one. If you turned two-factor on before backup codes existed, you don't have any yet: make a set from that page. Nobody else can turn your two-factor auth on or off for you, and that includes your admin. If you've lost the phone and have no codes left, reach us through Support.