Multi-Factor Authentication
Protect your account with a second factor.
Multi-factor authentication (MFA) protects your account, even if your password is compromised.
Why MFA?
With MFA, attackers need:
- Your password AND
- Access to your smartphone
Without both, login is impossible.
Set Up MFA
Requirements
- Smartphone with authenticator app
- Recommended: Google Authenticator, Authy, Microsoft Authenticator
Step by Step
Open Settings Go to Settings > Security
Activate MFA Click Set up MFA
Open Authenticator App Open your authenticator app on your smartphone
Scan QR Code Scan the displayed QR code
Enter Code Enter the 6-digit code from the app
Done MFA is now active
Login with MFA
For each login:
- Enter email and password
- Enter 6-digit code from authenticator app
- Log in
Enter Code
The code changes every 30 seconds. Enter the current code. If it doesn't work, wait for the next one.
Backup Codes
When setting up MFA, you receive backup codes:
- 10 one-time codes
- In case you lose your smartphone
- Each code works only once
Store Backup Codes Safely
- Print and store securely
- Save in a password manager
- NOT on the smartphone
Disable MFA
If you need to disable MFA:
- Go to Settings > Security
- Click Disable MFA
- Confirm with your current MFA code
⚠️ Warning: Without MFA, your account is less protected.
Lost Device?
If you lose your smartphone:
- Use a backup code to log in
- Disable MFA in settings
- Set up MFA again with the new device
No Backup Codes?
Contact our support:
- Email: support@corvalis.de
- Proof of identity required
Best Practices
- ✅ Activate MFA for all team members
- ✅ Store backup codes safely
- ✅ Set up authenticator app on new device before deleting the old one
- ❌ Save QR code screenshots
- ❌ Store backup codes digitally on the same device