Setting up two-factor authentication

Step-by-step enrolment, method choices, and recovery codes.

Two-factor authentication (2FA) adds a second step to signing in, so a password alone isn't enough to access your account. If your organisation requires it, you'll be taken to the setup screen the first time you sign in and asked to enrol before you can continue.

Starting setup

1. On the Set up two-factor authentication screen, select Enable two-factor authentication.
2. If your organisation allows both methods, you'll be asked to choose:

- Authenticator app: use an app such as Google Authenticator or Authy. This works without phone signal. - Email: Recruit emails a code to your work address each time you sign in. No app needed.

Setting up with an authenticator app

1. Choose Authenticator app.
2. Scan the QR code shown on screen with your authenticator app.
3. If you can't scan it, select Can't scan? Enter this code manually to reveal a text code you can type into your app instead.
4. Enter the 6-digit code your app generates, then select Verify.

Setting up with email

1. Choose Email.
2. Recruit sends a 6-digit code to your work email. Enter it and select Verify.
3. If it doesn't arrive, select Send a new code.

Saving your recovery codes

Once verification succeeds, Recruit shows a set of recovery codes. Each one lets you sign in a single time if you lose access to your authenticator app or email.

1. Save the codes somewhere safe, either by selecting Copy all or Download codes (this saves a file named `new-recruit-recovery-codes.txt`).
2. Tick I have saved my recovery codes.
3. Select Continue to app.

Store these codes outside Recruit, for example in a password manager. If you lose both your 2FA method and your recovery codes, you'll need your Recruit administrator to help you regain access.

Using 2FA at sign-in

Once enrolled, you'll be asked for your 2FA code every time you sign in with a password. See Logging in to Recruit for what that looks like.