Set up an authenticator app (TOTP)

What is an authenticator app?

An authenticator app is a free app on your phone that generates a 6-digit code every 30 seconds. When you log in to Eigenoid, you'll enter this code as a second step to prove it's really you — even if someone else knows your email address.

TOTP stands for Time-based One-Time Password. The code changes constantly, so it can't be reused or stolen.

Apps you can use

Any of these work with Eigenoid:

• Google Authenticator (Android, iOS)
• Authy (Android, iOS, Desktop)
• 1Password (Android, iOS, Desktop — if you already use it)
• Bitwarden (Android, iOS, Desktop)
• Microsoft Authenticator (Android, iOS)

You only need one. If you're not sure which to pick, Google Authenticator or Authy are straightforward choices.

How to set it up

You can enrol an authenticator app in two situations:

• During invitation claim — the portal prompts you to choose at least one method when you first follow your invitation link.
• Later, from the Security page — after you're already signed in, you can add more methods at any time.

Step 1 — Open the Security page

In the Eigenoid portal, click your profile icon (top right) and select Security. Then click Add authenticator app.

Step 2 — Name your authenticator

The portal shows a name field pre-filled with "Authenticator app". You can leave it as-is or change it to something more specific — for example, the name of your app or the device it's on.

Once you're happy with the name, click Generate QR code.

Step 3 — Scan the QR code

Your screen will show a QR code. Open your authenticator app and look for an option like "Add account", "+", or "Scan QR code". Point your camera at the QR code on screen.

:::tip Can't scan the QR code? If the camera won't focus or you're on the same device as the portal, tap "Enter key manually" (or similar) in your app and type in the code shown below the QR code instead. :::

Step 4 — Enter the 6-digit code

Your app will now show a 6-digit code. Type it into the Verification code field on the portal and click Confirm. This proves that the setup worked correctly.

Step 5 — Save your recovery codes ⚠️

After a successful confirmation, the portal shows a list of recovery codes. These are one-time backup codes you can use if you ever lose access to your authenticator app.

warning

Recovery codes are shown once and never again. Copy them and store them somewhere safe right now — for example, in a password manager or a printed note kept in a secure place.

Once you've saved the codes, click Done. Your authenticator app is now enrolled.

Logging in with your authenticator app

When you log in, enter your email address on the portal. Choose Authenticator app from the list of your enrolled methods. Open your authenticator app, find the Eigenoid entry, and type in the current 6-digit code. You have 30 seconds before the code refreshes — if it changes while you're typing, just use the new one.

What are recovery codes for?

Recovery codes let you sign in if you lose your phone or uninstall your authenticator app. Each code works only once — after use it's gone. Once you're back in, go to Security and set up your authenticator app again.

note

If you've used all your recovery codes or lost them, you can still sign in using a Passkey if you have one enrolled, or by contacting your admin. See the troubleshooting guide for more options.

Troubleshooting

The QR code won't scan

Use the manual entry option in your authenticator app instead of the camera. There's a text code displayed below the QR code on the portal — copy it into the app.

My code isn't accepted

The most common cause is a clock that's out of sync on your phone. TOTP codes are time-sensitive — even a 1-2 minute difference can cause rejections.

On iPhone: Settings → General → Date & Time → turn on Set Automatically.
On Android: Settings → General Management → Date and time → turn on Automatic date and time.

If the time is correct and codes are still rejected, try removing and re-adding the account in your authenticator app.