Skip to main content
What can we help you with?
< All Topics
Print

Protect your account with two-factor authentication

Posted
Updated
ByThe Wax Stak Team

By the end of this article your back-office account will ask for a six-digit code from an authenticator app whenever you sign in with a password, and you will have a set of backup codes in a safe place.

What you need

An authenticator app on your phone — Google Authenticator, 1Password, Authy or any app that scans a QR code and shows six-digit codes. Two-factor authentication belongs to your sign-in, not to one business: once it is on, it protects your account in every business you belong to.

Turn it on

  1. Click your avatar at the top right and choose Profile.
  2. In the Two-factor authentication card — it shows Off — click Set up authenticator app.
  3. Confirm your password and click Next. (An account that signs in only with Google or Apple skips this.)
  4. Scan the QR code with your authenticator app. Can’t scan? Copy the key under Can’t scan? Enter this key by hand: into the app instead.
  5. Type the six-digit Authentication code the app now shows and click Verify and turn on.
  6. The page shows your Backup codes. Click Copy codes and keep them somewhere safe — a password manager, a printed note in a drawer. They will not be shown again.
  7. Click I’ve saved these codes. The card now shows On.

From now on, after your password (or Google or Apple), the sign-in page asks for your Authentication code. A passkey sign-in is not asked for one — the passkey already proves it is your device.

Use a backup code

Phone lost or reset? On the code step of the sign-in page click Use a backup code instead, enter one of your backup codes and click Verify. Each code works once. Then sign in normally and, from your profile, set up the authenticator again on your new phone.

New backup codes

Running low, or not sure where you put them? In the Two-factor authentication card click New backup codes, confirm your password and click Generate new codes. The new set replaces the old one — codes you saved before stop working.

Turn it off

In the same card click Turn off, confirm your password and click Turn off two-factor. You will no longer be asked for a code.

When your business requires it

An owner or admin can require two-factor authentication for everyone under Settings → Company, in the Security card, with Require two-factor authentication. When it is on:

  • Anyone who has not set it up sees Set up two-factor authentication right after signing in, and goes through the steps above before reaching the app. There is no “later” — only Sign out.
  • Turning it off from your profile only lasts until your next sign-in, when you are asked to set it up again.
  • The mobile app is not affected.

Good to know

  • The code changes every 30 seconds. If one is refused, wait for the next one and make sure your phone’s clock is set automatically.
  • Two-factor applies to password, Google and Apple sign-ins. Passkeys count as already verified.
  • Nobody at Wax Stak can read your backup codes. If you lose both your authenticator and your codes, write to support@waxstak.com from the email on your account.

Related

Table of Contents