How do I add an authenticator app, or require one for everyone?
Each person turns on an authenticator app under Sign-in & alerts. Owners can require it for everyone on Settings > Staff and reset it after a lost phone.
An authenticator app adds a second step after the emailed code. It is the same kind of app your bank uses: Google Authenticator, Microsoft Authenticator, 1Password or Authy all work.
Before you begin
- Each person sets up their own app, on their own phone, under Sign-in & alerts.
- Owners can require the app for everyone, but only after setting up their own, so they do not lock themselves out.
Steps
To turn it on for yourself
- Open Sign-in & alerts from Settings (staff and helpers find it in their menu).
- In the Authenticator app card, press Set up an authenticator app.
- Scan the code with your authenticator app. If you cannot scan it, choose the app's "enter a setup key" option and type the key shown.
- Type the six-digit code your app shows and press Turn it on.
- Save your recovery codes when they appear: Copy or Download them, then press I've saved them. They are shown only once and each works one time.
To require it for everyone (owners)
- Open Staff and scroll to Sign-in security.
- Tick Require an authenticator app for everyone. It shows how many people have one already.
- Press Save.
To help someone who lost their phone (owners)
- In the Staff table, press Reset app beside their name and confirm Reset.
- They sign in with the emailed code, then set the app up again on the new phone.
What you'll see
- Once the app is on, the sign-in page asks for the app's code after the emailed code.
- When it is required, anyone without an app is sent to Sign-in & alerts to set one up before they can use anything else in the back office. Nobody can turn their own app off while it is required.
- The Signs in with column in the Staff table shows Face ID / fingerprint, Authenticator app, or Emailed code only.
- A reset ends that person's session. History records resets.
Troubleshooting
"Set up your own authenticator app first." Owners must have an app before they can require it for others.
I cannot reset another owner's app. You need your own app turned on first, or ask NinjaHQ.
My codes stop working. The clock on your phone may be off. Turn on automatic date and time, then try the next code.
Only a few recovery codes left. Under the same card, type a code from your app and press Make new recovery codes.
Questions
What does an authenticator app protect against?
Someone who gets into a person's email still cannot get into the back office, because they also need the six-digit code from that person's phone.
I lost my phone. What do I do?
Use one of your recovery codes, or ask an owner to reset your app under Settings > Staff. You then sign in with the emailed code and set the app up again on the new phone.
Does Face ID or a fingerprint sign-in skip the app?
Yes. A passkey on your own device already counts as two steps, so it does not ask for the app code.
Related articles
- How do I sign in with Face ID and get phone notifications?
- How do I add a staff member or give someone back office access?
- How do I change someone's role, or remove them?
- What can an owner, manager, staff member and website helper do?
- What does a website helper see, and how do I use the Start here page?