Two-factor authentication

Protect your account with a code from an authenticator app, and what to do if you lose access to that app.

Updated

Two-factor authentication asks for a 6-digit code from an authenticator app each time you sign in, on top of your usual sign-in. It is optional, and it works with apps such as Google Authenticator, Authy or 1Password. Text message codes are not offered.

Before you start

  • Your email address must be verified. If it isn't, you'll see Verify your email first.
  • If you signed in a while ago, Mozaic may ask you to sign out and sign back in before you change this setting.
  • Have your authenticator app ready on your phone or computer.

Turn it on

  1. Go to Settings > Security > Two-Factor Authentication.
  2. Select Set up authenticator app.
  3. 1. Scan this QR code: open your authenticator app and scan the code on screen. If you can't scan it, use Copy secret and paste the code into your app by hand.
  4. 2. Enter the 6-digit code: fill in Name this method (for example, the name of your phone) and type the code your app shows in 6-digit code.
  5. Select Verify & Enable.

You'll see Two-factor authentication enabled.

Note: The tile in Settings always reads "Add an extra layer of security to your account", even once two-factor authentication is on. Open the tile to see your methods under Enrolled methods.

Signing in with it

After your usual sign-in, you'll see Enter verification code. Open your authenticator app, type the current code and select Verify. Mozaic asks for a code every time you sign in: there is no option to remember a device.

Turn it off

  1. Go to Settings > Security > Two-Factor Authentication.
  2. Under Enrolled methods, select Remove next to the method.
  3. Confirm in the Remove this method? dialog.

If you lose your authenticator app

There are no backup codes. Instead, you recover access by email:

  1. On the Enter verification code screen, select Can't access your authenticator?.
  2. On Recover access to your account, select Send recovery link.
  3. Open the email and click the link.
  4. Select Disable MFA and continue.

Two-factor authentication is turned off and you can sign in again. Once you're back in, set it up again with your new device.

If something looks wrong

  • The code is refused: authenticator codes change often. Type the one your app shows right now, and check that the date and time on your phone are set automatically.
  • The recovery email doesn't arrive: check your spam folder. If it still doesn't come, write to support@mozaicfinance.com from the address on your account.

Was this article helpful?