Set up two-step sign-in

Two-step sign-in asks for a 6-digit code from an app on your phone after your password, so a stolen password alone cannot open BMS.

Before you start

Install an authenticator app on your phone: Google Authenticator, Microsoft Authenticator, Okta Verify and Authy all work.

1. Open Edit Profile and, under Security, press Off - set up next to Two-factor authentication.

2. Scan the QR code with your authenticator app. Can’t scan it? Type the setup key shown under the code into the app instead.

   

   Scan the code, then type the 6-digit code the app shows.

3. Type the code from the app into 6-digit verification code and press Verify.

4. Save your recovery codes: press Download codes, keep the file somewhere safe, then press Continue. Each code works once, if you lose your phone.

From now on, every sign-in asks for a code. If you do not have your phone, press Use a recovery code at the code step.

Caution

If your firm requires two-step sign-in, BMS asks you to set it up the first time you sign in, and you cannot turn it off yourself. Lost your phone and your codes? Ask an Admin to reset it.

Needs setup

If the page says two-factor authentication is not configured, whoever runs your BMS needs to set it up first.