Skip to content

Account Security

Two-factor authentication adds a verification code to your password when you sign in. Credence supports an authenticator app and one-time backup codes for recovery.

Open your user profile from Account, then use the Security tab to set up or manage two-factor authentication. Security settings belong to the signed-in user. Viewing another user's profile does not expose their security settings, even when you can administer users.

Enable two-factor authentication

Have your authenticator app ready before starting setup. Confirm your current password, then scan the QR code with the app or enter the setup key manually. Enter a code from the app within five minutes of confirming your password to finish. Two-factor authentication is enabled only after the code is verified.

Once enabled, sign in with your password and a code from your authenticator app. Other browser sessions must also verify a code before continuing to use Credence.

Integrations that sign in to an account with two-factor authentication use OAuth authorization through your browser. Email-and-password API sign-in is available only to accounts without two-factor authentication. Enabling two-factor authentication signs out integrations that were authorized as you before it was enabled, so reauthorize them through your browser afterwards. Integrations that use their own client credentials are not affected.

Backup codes

Generate backup codes after connecting your authenticator. Keep them somewhere safe and separate from the authenticator so you can recover access if your device is lost or unavailable.

  • Each backup code works once.
  • Generating a new set immediately invalidates all previous backup codes.
  • To sign in without your authenticator, choose Use Backup Code during sign-in and enter an unused backup code.
  • Viewing or generating backup codes requires verification within the last five minutes. Credence asks you to sign in again with your password and an authenticator or backup code when needed.

If you lose both your authenticator and all unused backup codes, these self-service recovery options cannot complete sign-in. Contact your Credence administrator for help.

Disable two-factor authentication

Disabling two-factor authentication requires verification within the last five minutes and confirmation. Credence asks you to sign in again when needed. Disabling removes your authenticator and backup codes, then returns you to your user profile. Future sign-ins require only your password.

To connect a replacement authenticator, disable two-factor authentication, enable it again with the replacement app, and generate a new set of backup codes.