Account & security
Setting up and using an authenticator
Add a second verification step to protect your account.
THE SHORT ANSWER
An authenticator adds a second verification step to account access. Use only the setup process offered in your account and keep the setup secret private.
- Applies to
- People accessing or protecting their Ostro account.
Updated
In this guide
An authenticator generates time-based codes used alongside your password. Complete the security steps shown in your Ostro workspace before accessing protected features.
Set up the authenticator securely
- Open the security setup step in your authenticated workspace.
- Scan the displayed QR code with your authenticator app, or use the provided setup method.
- Enter the current code to confirm that the setup works.
- Protect the authenticator app and the device that holds it.
The QR code and setup secret are sensitive. Do not email them, paste them into a support message or let another person enrol your account on their device.
If a code is rejected
Make sure you are using the entry for the correct Ostro account and a current code. Check your device’s automatic date and time settings. Wait for the next code if the current one is about to expire.
Avoid repeated rapid attempts. Temporary request limits may apply.
Changing devices or losing access
Use any supported security controls while you still have access to the current authenticator. If you have lost access, support must guide you through the account-recovery process.
Do not remove your only working authenticator before confirming an appropriate replacement or recovery path.
Something unclear? Suggest a correction or ask a question.
Tell us what’s happening. We’ll help you find the next step.
Contact Ostro support