Two-factor authentication

Why use two-factor authentication

Two-factor authentication adds a second verification step to a Practize account. It reduces the risk from a stolen password, but it does not replace unique passwords, device security, or correct employee access.

Enable it

Open Settings → Apps → Two-factor authentication and choose the setup action. Follow the on-screen instructions to connect a compatible authenticator and verify the generated code. Complete the confirmation before closing the setup screen.

Store any recovery information shown during setup in an approved secure location. Never store it in a client journal, shared chat, ordinary email, or an AI Assistant question. Each person should use their own Practize login and second factor.

Sign in and recover access

At sign-in, enter the current verification code after the password step. If a code is rejected, confirm the device time is automatic and try the next current code once. Repeated retries can complicate diagnosis.

If the authenticator device is lost, use the recovery option shown by Practize or contact an authorized administrator or support channel. Identity should be verified before two-factor authentication is reset. After recovery, review active users and change the password if account exposure is possible.

Administration and troubleshooting

Removing two-factor authentication weakens the account immediately. Limit that action to the account owner or an authorized administrator, and re-enable it after recovery. Never ask a client or colleague to send a one-time code, QR setup image, recovery code, password, or session cookie.