Set up two-step verification

Set up an authenticator app. Owners and admins need one when their organization requires it.

Two-step verification adds a 6-digit code from an app on your phone to your email sign-in. Occam asks owners and admins for the code when their organization's owner has made it a requirement. Staff are never asked.

Before you start

Install an authenticator app on your phone. Any app that makes 6-digit codes works, such as Google Authenticator, 1Password, Authy or Microsoft Authenticator.

Set up your authenticator

If you're an owner or admin and your organization requires it, Occam takes you to the Two-step verification page by itself the next time you open the dashboard. Otherwise, go to app.occam.gives/auth/mfa while you're signed in.
Select Set up an authenticator.
Scan the QR code with your authenticator app. If you can't scan it, open Can't scan? Enter the key by hand and type the key into your app instead.
Enter the 6-digit code your app shows and select Verify.

If you're not required to use it yet, you can still set it up now. Occam won't ask you for a code until the requirement applies to you.

Sign in with a code

Once the requirement applies to you, Occam asks you to Enter the 6-digit code from your authenticator app each time you sign in, right after you open your sign-in link. Type the current code and select Verify.

If you see That code did not match. Try the next one., wait for your app to show a new code and enter that one.

If you lose your phone

There are no backup codes, and you can't reset two-step verification yourself. If you lose your phone or delete the app, email info@occam.gives.

The same goes for moving to a new phone: you can't remove or replace your authenticator in Occam. If your authenticator app can move its codes to a new phone, do that before you reset the old one.

Require it for owners and admins

Only the owner can turn this on or off.

In the sidebar, go to Settings.
In Two-step verification for your team, tick Require an authenticator code for owners and admins.

Owners and admins who haven't set up an authenticator are sent to set one up before they can use the dashboard. Ask them to do it before you turn this on. Staff aren't affected.

Good to know

Admins invited after you turn this on are told in their invitation email that they'll set up an authenticator the first time they sign in. See Invite your team.
Two-step verification is separate for each person. Setting yours up doesn't turn it on for anyone else.