Skip to main content
Everyone Two-factor authentication adds a second step when you sign in: a six-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in without that code.

​
Before you start

  • You need an authenticator app on your phone. Any app that makes six-digit sign-in codes works.
  • You need a safe place for 10 recovery codes, away from your phone. A password manager or a sheet of paper works.
  • Two-factor belongs to you, not to a workspace. It protects every workspace you belong to.

​
Turn on two-factor

1

Open your security settings

In OnlyX, click Settings. Then click Security. On a phone, Settings is under More.
2

Start the setup

In the Two-factor authentication card, click Turn on two-factor.The Turn on two-factor window opens with a QR code.
3

Scan the QR code with your app

In your authenticator app, add a new account and scan the QR code. The app adds OnlyX with your email address and shows a new six-digit code every 30 seconds.If you cannot scan it, for example because the app is on this same phone, click Can’t scan it?. Then type the key it shows into your app.
4

Enter the code from your app

In Code from your app, enter the six digits your app shows now. Then click Confirm and continue.OnlyX shows “Two-factor is on”, and the window changes to Save your recovery codes.
The Turn on two-factor window with a blurred QR code, a six-digit code typed in Code from your app, and the Confirm and continue buttonThe Turn on two-factor window with a blurred QR code, a six-digit code typed in Code from your app, and the Confirm and continue button

1 Scan this with your authenticator app · 2 The code your app shows now · 3 Confirm and continue

5

Save your recovery codes

Click Copy all, then paste the 10 codes into a safe place. You can also write them down. Keep them away from your phone.
The Save your recovery codes window with the ten codes blurred, the Copy all button, the tick box and the Done buttonThe Save your recovery codes window with the ten codes blurred, the Copy all button, the tick box and the Done button

1 Copy all · 2 Tick this after you saved the codes · 3 Done

6

Finish the setup

Tick I have saved these somewhere safe. Then click Done.The card shows On, the date, and “10 recovery codes left”. OnlyX also emails you “Two-factor authentication is on”.
OnlyX shows your recovery codes only once and cannot show them again. Each code works one time. They are your only way back in if you lose your phone.
If you close the window before you enter a code, two-factor stays off. When you start again, OnlyX makes a new QR code. Remove the old OnlyX entry from your app and scan the new one.

​
Sign in with a code

1

Enter your email and password

On the sign-in page, enter your email address and your password. Then click Sign in.The Authenticator code step opens.
2

Enter the code from your app

In Code, enter the six digits your app shows now. Then click Sign in.
The sign-in page on a phone asking for the six-digit authenticator code, with the Use a recovery code link under the Sign in buttonThe sign-in page on a phone asking for the six-digit authenticator code, with the Use a recovery code link under the Sign in button

1 The code from your app · 2 Use a recovery code, if you do not have your phone

The code step lasts 5 minutes. If it runs out, click Start over and enter your password again. After 5 wrong codes in a row, OnlyX refuses every code for 15 minutes: wait 15 minutes, then click Start over.

​
Sign in with a recovery code

Use a recovery code when you do not have your phone.
1

Switch to a recovery code

On the Authenticator code step, click Use a recovery code.The step changes to Recovery code.
2

Enter one of your codes

Type one of your recovery codes with its hyphen, like xxxxx-xxxxx. Capital letters and spaces do not matter. Then click Sign in.That code is now spent. The count on the Two-factor authentication card goes down by one.
To go back to the app, click Use authenticator app. If you have a new phone, turn two-factor off with a code from your old phone or a recovery code. Then turn it on again, and scan the new QR code with the new phone.

​
Make new recovery codes

Make new codes when you are running low, or when someone else may have seen your list.
1

Open the New recovery codes window

In Settings > Security, in the Two-factor authentication card, click New recovery codes.
The Two-factor authentication card with the On badge, the date and 8 recovery codes left, and the New recovery codes and Turn off buttonsThe Two-factor authentication card with the On badge, the date and 8 recovery codes left, and the New recovery codes and Turn off buttons

1 On, and the codes you have left · 2 New recovery codes · 3 Turn off

2

Confirm that it is you

In Code, enter the code your app shows now, or one unused recovery code. Then click Generate.The Save your recovery codes window opens with 10 new codes.
3

Save the new codes

Save the codes as you did when you turned on two-factor. Tick I have saved these somewhere safe, then click Done.Your old recovery codes stopped working when you clicked Generate.

​
Turn off two-factor

1

Open the Turn off window

In Settings > Security, in the Two-factor authentication card, click Turn off.The Turn off two-factor? window opens.
2

Enter your password and a code

In Password, enter your password. In Code, enter the code your app shows now, or one unused recovery code.
3

Turn it off

Click Turn off.OnlyX shows “Two-factor is off” and emails you “Two-factor authentication was turned off”. OnlyX deletes your setup key and every recovery code. To turn two-factor on again, you scan a new QR code.

​
Good to know

  • Each six-digit code works only once. After you use one, wait for the next code in your app.
  • After 5 wrong codes in a row, OnlyX refuses every code for 15 minutes. Wrong codes at sign-in, in New recovery codes and in Turn off all count.
  • A password reset does not turn two-factor off. See Change or reset your password.
  • Owners and admins cannot turn it on or off for you. They also cannot make it required.
  • The recovery code count goes down with each code you use. OnlyX does not warn you when it runs low, so make new codes in time.

​
If something goes wrong

The code was wrong, too old, or already used. Wait for the next code in your app, then enter it.If you started the setup twice, your app may have two OnlyX entries. Only the newest QR code works. Remove the old entry.
The code was wrong or already used. Wait for the next code in your app and try again. If you do not have your phone, click Use a recovery code.
After 5 wrong codes in a row, OnlyX refuses every code for 15 minutes. Wait 15 minutes, then try again with a new code.
The code step lasts 5 minutes. Click Start over, then enter your password again. If you saw “Too many attempts”, you entered 5 wrong codes. OnlyX now refuses every code for 15 minutes, so wait 15 minutes before you start over.
The password in the Turn off two-factor? window is wrong. Enter the password you sign in with.
You cannot turn two-factor off yourself without a code. A password reset does not turn it off either. Email OnlyX support at support@onlyx.ai.

​
What’s next

Check your active sessions and sign-in alerts

Change or reset your password