Secure your account with an authenticator app
In short
Owners and Admins set up an authenticator app once, before they open any workspace. Open Account security, confirm your password and choose Set up authenticator. Scan the QR code with an app such as the Passwords app built into an iPhone, iPad or Mac, Google Authenticator, Microsoft Authenticator or 1Password, enter its six-digit code and choose Verify authenticator, then save your recovery codes, which are shown once. From then on, each sign-in asks for a code from the app.
An authenticator app adds a second check to your password. Setting it up is a one-time step: after it, each sign-in asks for a code from the app. Any app that reads a setup QR code and shows six-digit codes works. You may already have one: the Passwords app on an iPhone, iPad or Mac has it built in. Google Authenticator, Microsoft Authenticator and 1Password work too.
Owners and Admins need one before they can open any workspace. An Owner or Admin can also require one for every member; then Vendarity opens Account security for any member without one the next time they open that workspace. Any other member can add one from the same page at any time.
How do I set up an authenticator?
Open Account security
Open the account menu beside your name at the foot of the sidebar and choose Account security. You can also choose Manage your account security in Settings, then Organization. After you create a workspace, Vendarity opens this page for you.
Confirm your password
Enter it in Confirm your password and choose Set up authenticator.
Add Vendarity to your app
Scan the QR code with your authenticator app. On the phone or computer that has the app, you can choose Open in an authenticator app on this device instead. Or type the Authenticator setup key into the app.
Enter the current code
Type the code your app shows into Six-digit code and choose Verify authenticator. The page then says Your authenticator app is set up.
Save your recovery codes
Under Save your recovery codes, choose Copy recovery codes or Download recovery codes and store them outside Vendarity, for example in your password manager. They are not shown again.
Continue
Choose Open your workspace, or Return to your invitation if you were joining a colleague's workspace.
How do I sign in with a code?
After your email address and password, Vendarity shows One more check. Enter the six-digit code from your app in Authenticator code and choose Verify code. Vendarity asks for a code at every sign-in.
If you do not have your phone, choose Use a recovery code and enter one of your saved codes. Each recovery code works once.
Important: Keep your recovery codes somewhere you can reach without your phone. If you lose both your authenticator and every recovery code, contact support from your account's email address. Vendarity checks your identity before it resets your authenticator, including with another Owner or Admin of each workspace where you are an Owner or Admin, or by calling the business's listed phone number where there is none.
How do I get new recovery codes?
Open Recovery codes
On Account security, find Recovery codes. It appears once your authenticator is set up.
Confirm your password
Enter it under Confirm your password and choose Generate new recovery codes.
Save the new set
Under Your new recovery codes, choose Copy recovery codes or Download recovery codes and store them outside Vendarity. Your earlier codes stop working at once.
How do I see and end my sessions?
Under Active sessions on Account security, choose View sessions to see each device that is signed in, with its browser, IP address and when it was last active, in UTC. Choose Sign out this device to end another device's session.
Viewing and ending sessions needs a recent sign-in. If your last sign-in was more than five minutes ago, Vendarity asks you to sign in again first.
Once your authenticator is set up, Sign out other sessions ends every session except the one you are using. Changing or resetting your password also signs out your other sessions.
How long does a session last?
A session ends after 12 hours without activity, and after seven days in any case. Then sign in again.
Common questions
- Which authenticator app should I use?
- Any app that scans a setup QR code and shows six-digit codes, such as the Passwords app built into an iPhone, iPad or Mac, Google Authenticator, Microsoft Authenticator or 1Password. If your app cannot scan, open it from the link on the page or type the authenticator setup key.
- Do Managers, Reviewers and Viewers need an authenticator?
- Only if their workspace requires one for every member: an Owner or Admin turns this on in Settings, Team & access. Otherwise it is required for Owners and Admins only. Any member can set one up on the Account security page, and Vendarity then asks for a code at each of their sign-ins.
- Can I see my recovery codes again?
- No. Vendarity shows each set once. If you have used most of them or lost them, generate a new set under Recovery codes on Account security; the earlier codes stop working.
Related articles
Still stuck?Contact support with what you were doing and what happened.
Contact support