Setting up two-factor authentication (2FA)

How do I set up two-factor authentication for my Leapsome account?

Click your name in the top right, select 'Personal Settings' and click 'Enable two-factor authentication'. Choose an authenticator app or email, confirm with your password and save your recovery codes. If your company requires 2FA, you're asked to set it up at your next sign-in.

2FA adds a second step when you sign in to Leapsome with an email and password or with Google. This article explains how to set it up, how signing in works and how to manage your methods and recovery codes.

Table of Contents

• Setting up two-factor authentication
• Signing in with two-factor authentication
• Managing your methods and recovery codes
• FAQ

Setting up two-factor authentication

You can set up 2FA even if your company doesn't require it:

1. Click your name in the top right and select 'Personal Settings'.
2. Under 'Two-factor authentication', click 'Enable two-factor authentication' and choose a method.
3. Enter your password under 'Confirm with your current password' and click 'Continue'.
4. Follow the steps for your method and enter the code.
5. Save your 10 recovery codes, tick the confirmation box and click 'Done'.

If your company requires 2FA, you're asked to set up a second factor at your next sign-in before you can continue.

Available methods

• Authenticator app (recommended): use an app like Google Authenticator, Microsoft Authenticator or 1Password to generate codes.
• Email: receive a code at the email address of your account.

Your company decides which methods you can use, so you may only see one of them.

Signing in with two-factor authentication

After you enter your password, Leapsome asks you to confirm it's you:

• Authenticator app: enter the code from your app.
• Email: click 'Send code' and enter the code from your inbox. You can request a new code after 30 seconds.
• Recovery code: click 'Use a recovery code' if you don't have access to your method. Each recovery code works once.

Managing your methods and recovery codes

In the 'Two-factor authentication' section of 'Personal Settings', you can:

• Add a second method: set up both an authenticator app and email.
• Remove a method: confirm with your password. If your company requires 2FA, you can't remove your last method.
• Generate new recovery codes: the new codes replace your old ones, which stop working.

FAQ

• What if I lose my phone?
  Sign in with one of your recovery codes. If you have none left, ask your Leapsome admin to reset your 2FA. The reset signs you out on every device, and you set up 2FA again at your next sign-in.
• What if I run out of recovery codes?
  Generate new ones in 'Personal Settings'. Once you have no codes left, 'Use a recovery code' no longer shows at sign-in.
• What happens if I enter the wrong code too many times?
  After 5 wrong codes, you need to sign in again. Repeated wrong codes or passwords can temporarily lock your account.
• Why was I signed out?
  If your company starts requiring 2FA while you're signed in without it, you're signed out and need to sign in again with a second factor.
• Does 2FA apply if I sign in through single sign-on?
  Only if your company has turned this on. Otherwise, your company's identity provider handles the extra security step.