Two-factor authentication (2FA)

Two-factor authentication (2FA) requires a 6-digit code from your phone when you sign in — so even if your password is stolen, your account stays safe.

Pivra uses TOTP (time-based one-time passwords), which works with any standard authenticator app including Google Authenticator, Authy, 1Password, and Microsoft Authenticator.

---

Enabling 2FA

1. Go to Settings → Security
2. Under Two-factor authentication, click Enable authenticator app
3. A QR code appears — open your authenticator app and scan it
4. Can't scan? Click Can't scan? Enter manually to copy the secret key into your app instead
5. Your app will show a 6-digit code that refreshes every 30 seconds
6. Enter that code in the Verification code field and click Verify and enable
7. A green badge confirms 2FA is active on your account

---

Signing in with 2FA

After entering your email and password, you'll be taken to a second screen asking for your authenticator code.

1. Open your authenticator app
2. Enter the current 6-digit code for your Pivra account
3. Click Verify — you'll land on the dashboard

The code changes every 30 seconds. If it expires while you're typing, just use the next code that appears.

Magic link logins also require a 2FA challenge before you can access the dashboard.

---

Removing 2FA

1. Go to Settings → Security
2. Click Remove 2FA
3. Enter your current authenticator code to confirm you still have access to the app
4. Click Remove 2FA — your account returns to password-only login

---

I've lost access to my authenticator app

If you lose your phone or delete the app without disabling 2FA first, contact support@pivra.ai from your account email address. We'll verify your identity and disable 2FA manually.

To avoid this situation, export a backup of your authenticator before switching devices. Most apps (Authy, 1Password) support encrypted backups.

---

Frequently asked questions

Does 2FA cost extra? No. Two-factor authentication is available on all plans at no extra cost.

Which authenticator apps work? Any TOTP-compatible app works — Google Authenticator, Authy, 1Password, Microsoft Authenticator, Bitwarden, and more. Pivra does not send SMS codes.

Can team members have their own 2FA? Yes. 2FA is per-user, not per-workspace. Each team member can independently enable or disable it from their own Security settings.

I entered the correct code but it's not working. Make sure your phone's clock is accurate — TOTP codes are time-sensitive. On iPhone, go to Settings → General → Date & Time and enable Set Automatically. On Android, Settings → General Management → Date and Time → Automatic date and time.