Two-factor authentication (2FA) asks for a one-time code (OTP) as well as your password when you sign in to Vizmo, which protects your account if your password is stolen. You turn it on from your profile in the Vizmo portal. You can use one method at a time: an authenticator app or email.

Before you start

• Sign in to the Vizmo portal.
• For the authenticator app method, install an authenticator app on your phone.
• For the email method, make sure you can open the email address on your account. To turn email 2FA off later you need your account password and a code sent to that address.

Turn on 2FA with an authenticator app

1. Open the Hello menu in the top bar and select Profile.
2. In the 2FA section, turn on Authenticator/TOTP.
3. In the Set Up 2FA window, scan the QR code with your authenticator app. If you cannot scan it, copy the secret shown under Or paste the below secret in your authenticator and paste it into the app.
4. Enter the 6-digit code that your app shows and select Submit.
5. Vizmo shows "The 2FA has been enabled successfully" and opens the Your recovery codes window.
6. Copy the recovery codes and keep them somewhere safe, then select Done. You cannot view this set of codes again after you close the window.

To stop before you finish, select Cancel in the Set Up 2FA window.

Turn on 2FA with email

1. Open Profile and turn on Email in the 2FA section.
2. In the Set Up 2FA window, enter the 6-digit code that Vizmo sent to your email. Do not reload or close the window while you do this.
3. Select Submit. Vizmo shows "The 2FA has been enabled successfully" and the window closes.

To stop before you finish, select Cancel Setup. Email 2FA does not give you recovery codes.

Sign in with 2FA

1. On the sign-in page, enter your email address and select Next, then enter your password and select Login.
2. Vizmo asks for the code from your authenticator app or the code it sent to your email.
3. Enter the 6-digit code under Enter your OTP and select Login.
4. For email codes, you can select Resend OTP after the 60-second countdown ends. You can resend the code once.

In Vizmo Pass, the sign-in screen shows an OTP field when a code is needed. Enter your code there.

Turn off 2FA

1. Open Profile and turn off the method that is currently on.
2. Select Yes when Vizmo asks whether you want to disable 2FA.
3. For the authenticator app method, enter the code from your app and select Disable 2FA.
4. For the email method, enter your password, select Send OTP, enter the code from your email, then select Disable 2FA.
5. Vizmo shows "2FA has been disabled successfully".

If you lose access to your authenticator app

You need one of the recovery codes you saved when you turned 2FA on.

1. On the sign-in code screen, select Reset 2FA. This button appears when your account uses the authenticator app method.
2. Enter your email address under Enter Your Email and one of your saved recovery codes under Enter Recovery Code, then select Submit.
3. Vizmo shows "2FA has been reset successfully". Select Login and sign in with your password.
4. Open Profile and set up 2FA again. Setting up the authenticator app gives you a new set of recovery codes.

Things to know

• One method at a time: when one method is on, the other toggle is switched off and shows a message such as "Please disable TOTP authentication first" when you hover over it. Turn the current method off first.
• Setup happens in the web portal: you turn 2FA on, turn it off and use recovery codes in the Vizmo portal. Vizmo Pass only asks for the code when you sign in.
• Single sign-on: 2FA applies when you sign in with your Vizmo password. If your company uses SSO, your company's identity provider handles any extra verification.
• Admins cannot reset 2FA for you: if you cannot sign in, use a recovery code or contact Vizmo support.

Troubleshooting

• Invalid OTP: check that you are using the latest code, and that the time on your phone is correct, then try again. Codes have 6 digits.
• Invalid recovery code: enter one of the codes you saved when you set up the authenticator app method, exactly as shown, together with the email address on your account. The email method has no recovery codes.
• The email code does not arrive: check your spam folder, then select Resend OTP when the countdown ends.
• Your account is locked: after several wrong passwords in a row, Vizmo shows "Your account is locked due to multiple failed login attempts" and asks you to try again after a few minutes. Wait for the time shown, then sign in again.
• You have no recovery codes and no access to your authenticator app or email: contact Vizmo support at support@vizmo.in.