Two-factor authentication (2FA) adds an extra layer of security to your Risendo account. Even if someone obtains your password, they cannot sign in without a code from your authenticator app.
What you will need
- A smartphone with an authenticator app (Google Authenticator, Authy, 1Password, or any TOTP-compatible app).
- Access to your Risendo account email and current password.
- A safe place to store backup codes (password manager or printed copy).
Step 1 — Open profile settings
Sign in and go to Portal → Profile at /portal/profile. Scroll to the Two-factor authentication section.
Step 2 — Start setup
- Click Set up two-factor authentication.
- A QR code and manual secret key appear on screen.
- Open your authenticator app and scan the QR code (or enter the manual key).
- Your app will start generating 6-digit codes that refresh every 30 seconds.
Step 3 — Confirm and save backup codes
- Enter the current 6-digit code from your authenticator app.
- Click Enable 2FA.
- Save the backup codes shown immediately — each code works once if you lose access to your authenticator.
- Store backup codes in a password manager or print them and keep them in a secure location.
Backup codes are shown only once. If you lose both your authenticator and backup codes, contact support to recover your account.
Signing in with 2FA enabled
After enabling 2FA, the login flow at /login changes slightly:
- Enter your email and password as usual.
- You are prompted for a 6-digit authenticator code.
- Enter the current code from your app and click Verify.
- Optionally check Trust this device to skip 2FA on this browser for 30 days.
Trusted devices
Trusted devices are listed on your profile page under Two-factor authentication. To revoke access on all trusted devices, click Revoke all trusted devices — you will need 2FA on every login afterward.
Using a backup code
If you cannot access your authenticator app, enter a backup code instead of the 6-digit TOTP code on the login screen. Each backup code works once and is removed from your account after use.
Disabling 2FA
To turn off two-factor authentication, go to Portal → Profile, enter a valid authenticator code in the Disable 2FA form, and submit. All trusted devices are revoked when 2FA is disabled.
Other security tips
- Change your password regularly from the Profile page.
- Use a unique password not shared with other sites.
- Never share your authenticator codes or backup codes with anyone — Risendo staff will never ask for them.