We've updated our API endpoints to match what we use in our application. Some endpoints have been deprecated. See our Deprecated Endpoints page for migration details.
Set up email, authenticator app, or passkey-based MFA.
Multi-factor authentication (MFA) adds a second verification step to sign-in, on top of your password. Scanova supports three methods — email one-time codes, an authenticator app (TOTP), and passkeys — and all three live inside a single Manage MFA drawer. You can enable more than one method, pick a default, and generate backup codes in case you lose access to your usual method.
MFA is only available for accounts that sign in with a password. If your organization signs in through SSO, your identity provider handles authentication instead, and the MFA option doesn’t appear in your account settings.
Go to Account (your avatar menu, or /account) and find the Login & Security section on the Account tab. The Multi-Factor Authentication field shows your current status (Off, or On · {method}) with an edit icon that opens the drawer.
The Login & Security section of Account settings, with Password and Multi-Factor Authentication fields
The first time you open the drawer, you’re asked how you’d like to get your verification code:
The Choose authentication method step, listing Email, Authenticator App, and Passkey
Email — a one-time code is sent to your registered email address at sign-in.
Authenticator App — codes are generated by an app like Google Authenticator (any TOTP-compatible app works).
Passkey — your device’s fingerprint, face unlock, or screen lock. See Passkeys for a dedicated walkthrough of this method.
If your browser reports that your device supports a built-in (platform) authenticator, Passkey is listed first and flagged Recommended for this device.
Whichever method you pick, you’re first asked to re-enter your password to confirm it’s you:
The password re-verification step before setting up a new MFA method
If your account has no password (for example, you only ever signed in with Google), this step shows a Continue with Google button instead, so you can confirm your identity that way.
Choosing Email skips the app-setup step: after the password check, Scanova sends a 6-digit code to your registered email address and shows the same OTP-entry screen, with a countdown before you can request another code.
The email one-time code entry step, showing a resend countdown
Passkeys use your device’s built-in biometrics or screen lock instead of a code. Setup and sign-in both work a little differently from the code-based methods above — see Passkeys for the full walkthrough.
Once you have at least one method enrolled, the drawer’s main view lists it with a Default badge and a delete (trash) icon, and the footer button changes to Add another method:
The MFA status view with one enrolled method
Selecting Add another method re-opens the method picker — now only showing methods you haven’t already enrolled, with copy adjusted to reflect that you already have MFA set up:
Adding a second method once one is already enrolled
If you enroll more than one method, each row gets a Make default button (unless it’s already the default). Your default method is the one Scanova prompts for first at sign-in — you can still fall back to any other enrolled method or a backup code.To remove a method, select its trash icon, confirm your password (or re-authenticate with Google), and it’s removed immediately.
After enrolling your first MFA method, Scanova generates a set of single-use recovery codes. Save them somewhere safe — each can be used once to sign in if you lose access to your regular MFA method, and they’re never shown again after this step.
The recovery codes step, with Download and Copy actions
Once MFA is enabled, signing in with your password takes you to a security-check screen for your default method instead of straight into your account. For example, with a passkey as the default:
The MFA security check at sign-in
Check Remember this device for 2 weeks to skip the MFA challenge on that browser for the next two weeks. If you can’t use your default method, select Use backup code to enter one of the recovery codes you saved earlier:
Signing in with a backup code instead of the default MFA method
