Glossary
Two-factor authentication
Also called: 2FA · Two-step verification · Multi-factor authentication (MFA)
Two-factor authentication is a sign-in method that asks for two different proofs of identity, usually a password plus a code from a phone or a security key.
The most common second factor is a time-based one-time password (TOTP): an authenticator app shows a 6-digit code that changes every 30 seconds, made from a secret shared once through a QR code. Codes sent by SMS are weaker, because phone numbers can be taken over.
Recovery codes are the backup: single-use codes shown once at set-up, for when the phone is lost. Teams that handle customer data often require two-factor for every member, since one stolen password could expose every conversation.
How Risti does it
In Risti, two-factor is set up in You › Profile with an authenticator app, by scanning a QR code or typing the key. Sign-in then asks for a 6-digit code. You get ten recovery codes, shown once, and Use a recovery code signs you in without the phone. You can remember a browser for 30 days.
Owners can turn on Require two-factor for everyone in Settings › Organization › Security & sign-in, after turning on their own. Everyone else sets it up at their next sign-in. More on Security.