Which authenticator app works with easySales?

Any app that scans a QR code for 6-digit codes, such as Google Authenticator, Microsoft Authenticator or 1Password.

Why is my authenticator code not working?

The phone’s clock is off, the code changed while you typed it, or you already used that code. Set the time to automatic and use the next code.

How do I move my authenticator app to a new phone?

Use the app’s own transfer feature, or turn two-step verification off and on again with the new phone. See Change to a new phone above.

Does the authenticator app need mobile data?

No. The app makes the codes on the phone itself, so it works with no signal or Wi-Fi.

Do I have to enter a code every time I sign in?

Not on a trusted device: tick Don’t ask again on this device for 30 days. Your company may set At every sign-in instead.

How do I turn off two-step verification?

Select Turn off on Sign-in & security and enter your password and a code. It is not offered while your company requires it.

Use an authenticator app

Copy for AI

An authenticator app on your phone shows a new 6-digit code every 30 seconds. After your password, you type the code to prove the sign-in is yours. How it fits with the other methods is on Sign-in security.

Before you start

Install an authenticator app on your phone. Google Authenticator, Microsoft Authenticator and 1Password all work.
No permission is needed. The two-step verification section is on the Sign-in & security page of My profile when two-step verification is available to your company. If your company has it set to Off, there is no Turn on button.
You use an authenticator app or email codes, not both.

Steps

Open your menu, select My profile, then Sign-in & security, and find Two-step verification.
Beside Two-step verification, select Turn on. The Turn on two-step verification dialog shows three steps: Confirm it’s you, Scan and enter a code and Save recovery codes.
Select Continue. If easySales asks, enter your password in Confirm it’s you and select Confirm.
Open your authenticator app, add an account and scan the QR code. If you cannot scan, select Copy under Can’t scan? Enter this key and paste the key into the app.
Type the 6-digit code the app shows into Code from the app. easySales checks it as soon as the sixth digit is in; you can also select Confirm.
On Save recovery codes, select Copy or Download .txt, store the ten codes somewhere safe, tick I have saved these codes and select Done. See Use recovery codes.

What happens next

The page shows On beside Authenticator app, the date you turned it on, and Recovery codes: 10 of 10 left. easySales emails you that two-step verification was turned on. From the next sign-in on a device you have not trusted, easySales asks for a Verification code after your password.

To sign in, open the app, find the easySales entry and type the code shown. Each code works once and changes every 30 seconds; if it is about to change, wait for the next one.

Change to a new phone

Move the app before you wipe or hand in the old phone.

If your company does not require two-step verification: select Turn off, enter your password and a code from the old phone, then select Turn on again and scan with the new phone. You get a new set of recovery codes. Turn off also removes your passkeys and trusted devices; the dialog says so when you have passkeys.
If your company requires it: there is no Turn off button. Either use your authenticator app’s own transfer feature to move the easySales entry to the new phone, or, if you have a passkey, select Remove authenticator app on the Passkeys card, then Turn on under Two-step verification and scan with the new phone. Your passkeys stay, and you get a new set of recovery codes. Check a code from the new phone works before you wipe the old one.
If the old phone is already gone: sign in with a passkey or a recovery code. With a passkey, continue as in the previous point. Without one, turn it off with your password and a recovery code and turn it on again; if your company requires it, ask your company’s administrator to reset your two-step verification — see Get back in.

Rules to know

Codes depend on your phone’s clock. If a code is refused as That code is not right, set the phone’s time to automatic.
The code step lasts five minutes. After that, sign in again.
Five wrong codes lock code entry for a minute, and each further wrong code doubles the wait, up to 15 minutes; the message says how many minutes. easySales emails you when this happens, at most once a day.
Turn off asks for your password and a code every time. It is not offered while your company requires two-step verification. You stay signed in.

Why it works this way

The code proves you hold the phone. The app and easySales share a key that was shown once, as the QR code. Someone who has your password but not your phone cannot produce the code, so your customer records stay closed to them.

A code lasts 30 seconds and works once. A code read over your shoulder or caught on a fake page is useless a moment later, and cannot be used a second time even within its 30 seconds.

Wrong codes slow down, not shut out. From the fifth wrong code, each one makes the wait longer, up to 15 minutes, which stops a program from trying all million six-digit codes. A few typos cost you at most a minute, and once the wait starts easySales emails you, so a stranger’s attempts do not go unnoticed.

Turning it off takes both secrets. Turn off asks for your password and a code because someone who found your computer signed in could otherwise remove your protection in one click.

Work faster

Let the code submit itself. Typing or pasting the sixth digit checks the code at once; there is no need to select Verify. Tick Don’t ask again on this device for 30 days first, before the last digit. See Sign in.
Skip the code on your own computer. A trusted device asks only for your password for 30 days. See Sign-in security.
Add a passkey beside the app. A passkey signs you in with a fingerprint or face, and changing phones no longer needs Turn off. See Set up a passkey.

Examples

Ahmad’s phone change, day by day, is example A on Security examples.

A code refused at 9 am. Daniel Lim types the code from his app and sees That code is not right. Check the time on your phone, or use a recovery code. His phone’s clock is two minutes slow because he set it by hand. easySales accepts a code from 30 seconds either side of the current one, so two minutes is too far. He sets the phone’s time to automatic, waits for the next code, and it works.

Five wrong codes in a row. Priya mistypes her code five times. The fifth wrong code locks code entry for 1 minute. Had she carried on, the sixth would have locked it for 2 minutes, the seventh for 4, the eighth for 8 and the ninth for 15, the most it ever waits (1 × 2 × 2 × 2 = 8; the next doubling, 16, is capped at 15). easySales emails her once that day that someone typed too many wrong codes.

Common questions

Which authenticator app works with easySales? Any app that scans a QR code for 6-digit codes, such as Google Authenticator, Microsoft Authenticator or 1Password.
Why is my authenticator code not working? The phone’s clock is off, the code changed while you typed it, or you already used that code. Set the time to automatic and use the next code.
How do I move my authenticator app to a new phone? Use the app’s own transfer feature, or turn two-step verification off and on again with the new phone. See Change to a new phone above.
Does the authenticator app need mobile data? No. The app makes the codes on the phone itself, so it works with no signal or Wi-Fi.
Do I have to enter a code every time I sign in? Not on a trusted device: tick Don’t ask again on this device for 30 days. Your company may set At every sign-in instead.
How do I turn off two-step verification? Select Turn off on Sign-in & security and enter your password and a code. It is not offered while your company requires it.