Two-Factor Authentication (2FA)

What is two-factor authentication

Two-factor authentication (2FA) is a sign-in that asks for two different proofs of identity, usually something you know (a password) and something you have (a phone). If someone steals the password, they still can't get in without the second factor.

The most common second factor is a one-time code from an authenticator app such as Google Authenticator. The app shows a six-digit code that changes every 30 seconds. Codes by SMS and hardware security keys are other options. 2FA is the most common case of multi-factor authentication (MFA), which can ask for more than two factors.

How it works in SurveyNinja

• 2FA is available on every plan, including Free.
• You turn it on in Profile, under Sign-in and security: confirm your password, scan the QR code with an authenticator app and enter the six-digit code.
• SurveyNinja then gives you eight recovery codes. Each one works once, for the day you don't have your phone.
• In the same place you can get a new set of codes or turn 2FA off. Both ask for your password.
• 2FA is set per person: each team member turns it on in their own profile.

Step-by-step guide: Two-factor authentication.

Tips

• Save the recovery codes in a password manager right away. Without the phone and the codes, only support can help you sign in.
• If you signed up with Google and never set a password, set one first in Profile under Password: 2FA setup asks for it.
• For a company team, SSO on the Premium plan moves sign-in to your identity provider.