Two-factor sign-in (OTP)

The 6-digit one-time code you enter after your password, by e-mail or from an authenticator app.

Overview

Two-factor sign-in asks for a 6-digit one-time code (OTP) after your password, sent by e-mail or shown in an authenticator app.

Why use it

Stop anyone who learns your password from signing in.
Let your company choose e-mail codes or an authenticator app.

Before you begin

You can open your sign-in e-mail inbox, or you have an authenticator app on your phone.

Why O2M asks for a code

A password alone can be guessed or stolen. The one-time code (OTP) proves it is really you, because it reaches only your e-mail inbox or your phone. Your company chooses how codes arrive:

Method	Where the code comes from	Set-up
E-mail code	Sent to your sign-in e-mail each time you sign in	Nothing to set up
Authenticator app	Google Authenticator, Microsoft Authenticator, Authy or a similar app on your phone	Scan a QR code once

Sign in with an e-mail code

1Enter your e-mail and password and click Sign in to dashboard.
2The Check your e-mail screen opens. Open the e-mail from O2M and find the 6-digit code.
3Type the code and click Verify and sign in.

Figure 3.1 Check your e-mail: enter the 6-digit code O2M sent to your address.

No e-mail? Check your spam or promotions folder, then click Send a new code. Only the newest code works.
Codes are valid for a short time. If yours has expired, send a new one.

Set up an authenticator app (first time)

If your company uses an authenticator app, the first sign-in shows a QR code.

1Install Google Authenticator, Microsoft Authenticator or Authy on your phone.
2In the app, tap + and scan the QR code on the screen. If you cannot scan, type the key shown under the code.
3The app adds One to Many and shows a 6-digit code that changes every 30 seconds.
4Type the current code and click Verify and sign in.

Figure 3.2 Set up your authenticator app: scan the QR code, or enter the key by hand.

Sign in with an authenticator app

After set-up, each sign-in asks for the code your app shows for One to Many.

Figure 3.3 Enter your code: type the code from your authenticator app.

Tip If a code is refused, wait for the next one to appear and use it before it changes. Check that your phone's clock is set automatically.

Trust this device for 30 days

Trust this device for 30 days is ticked by default. On your own computer, leave it ticked and O2M will not ask for a code on this browser for 30 days. On a shared or public computer, untick it.

Lost your phone or changed it

Moving to a new phone: while you can still sign in, open Settings → Security → Two-factor login and click Move to a new phone. Your old app keeps working until you confirm a code from the new one.
Phone lost: e-mail support@o2m.in from your sign-in address to reset your two-factor sign-in. You set up the app again at your next sign-in.

Important Never share a sign-in code with anyone, including people who say they are from O2M.