Two-factor authentication (2FA) is an extra security step when signing in. In addition to your password, you may sometimes need to enter a 6-digit verification code from an authenticator app. This helps keep your account better protected.
When do we ask for a verification code?
You will not be asked for a code every time you sign in. We only ask for the code if:
You sign in on a new or unknown device.
We need extra confirmation for security reasons (for example, if you’re signing in again after a period of inactivity).
How do you enable two-factor authentication?
That depends on how you sign in.
You sign in with Google, Microsoft, or your work account
Enable two-factor authentication through your Google, Microsoft, or work account (SSO). This centralizes your security and helps protect not only your o2o account, but also other apps where you use the same login.
You sign in to o2o with your password
You can enable two-factor authentication on your profile page.
Go to your profile.
Click 'Add two-factor authentication'.
Scan the QR code with your authenticator app.
Enter the 6-digit code to confirm.
Which authenticator app do you need?
You can use any app that supports verification codes (TOTP). Common options include:
Authenticator apps: Google Authenticator, Microsoft Authenticator or 2FAS.
Password managers: 1Password, Bitwarden or iCloud Keychain on your iPhone.
Note: you cannot use itsme for this step.
How do you sign in with a code?
Open your authenticator app.
Copy the active 6-digit code (it refreshes every 30 seconds).
Enter the code on the o2o sign-in screen.
Disable two-factor authentication
You can disable two-factor authentication on your profile, in the same place where you enabled it. Keep in mind that your account will be less protected.