Two-factor authentication

What it does

Two-factor authentication adds a second step to signing in. After your password, or after Apple, Google or GitHub, Nourva asks for a 6-digit code from an authenticator app on your phone. Someone who learns your password still cannot get in without that code.

You turn it on on the web. From then on the app and the web both ask for the code. At the top of the Security & devices page, a tag reads Basic protection while it is off and Enhanced protection while it is on.

You need an authenticator app on your phone, such as Google Authenticator, Authy or 1Password.

Turn it on

1. Sign in at nourva.ai and open Security & devices in your dashboard.
2. Under Two-factor authentication, choose Enable two-factor authentication.
3. In Confirm setup, enter your Current password and choose Continue.
4. In Activate the authenticator, scan the QR code with your authenticator app. If you can't scan it, choose Copy key and paste the key into the app.
5. Enter the 6-digit code the app shows and choose Verify and enable.
6. Nourva shows your Recovery codes. Choose Download the codes to save them as a text file, then choose I saved them.

Nourva then signs you out. Sign in again, this time with a code from your app. The page now shows Enabled under Two-factor authentication.

Finish steps 4 and 5 within a short time of choosing Continue. If you take longer, choose Cancel and start again.

If your account has no password

If you signed up with Apple, Google or GitHub and never set a password, step 3 has no password box: choose Continue. Nourva accepts this only within a short time of your last sign-in. If it has been longer, it asks you to choose Sign in again. Sign in, and you come back to this page; then start again straight away.

Sign in with a code

Each time you sign in, Nourva asks for the code after your password, or after Apple, Google or GitHub. Open your authenticator app and enter the 6-digit code it shows for Nourva.

• In the app: the screen reads Enter your two-factor code. Type the code and tap Verify.
• On the web: the page reads One more step. Type the code and choose Continue.

The code changes often, and each one works only once. If a code is refused, wait for the next one to appear in your app and try again.

Sign in with a recovery code

If you can't reach your authenticator app, use one of your recovery codes on the web.

1. Sign in at nourva.ai as usual.
2. On One more step., choose Use a backup code. The sign-in page calls your recovery codes backup codes.
3. Type one of your recovery codes and choose Continue.

That code is now used up. Cross it off and keep the rest. The app takes only the 6-digit code from your authenticator app, so use the web whenever you need a recovery code.

If you have lost both your authenticator app and your recovery codes, write to support@nourva.ai.

Turn it off

You need a current 6-digit code from your authenticator app, and your password if your account has one. A recovery code does not work here.

1. Open Security & devices in your dashboard.
2. Under Two-factor authentication, choose Disable 2FA.
3. In Disable two-factor authentication?, enter the 6-digit code and your Current password, then choose Disable 2FA.

Your recovery codes stop working, your account returns to Basic protection, and Nourva signs you out. Sign in again the way you usually do.

You can turn it on again at any time, and each time you get a new set of recovery codes. Moving to a new phone? Turn it off with a code from your old phone, then turn it on again and scan the new QR code with the new one.