Enabling Two-Factor Authentication (2FA)
Two-factor authentication (2FA) is an extra layer of security on your account on top of a username and password. By turning on 2FA, your account will be protected against people pretending to be you. Rev ensures that the person logging into your account is actually you by asking for a 6-digit authentication code, which is generated in an authenticator app.
2FA is optional and available on all Rev.com accounts. This article explains how to turn it on, how it works when you sign in, how to turn it off, and how it differs from the emailed verification code some accounts see.
Table Of Contents
- How 2FA works
- Turn on 2FA
- Signing in with 2FA
- Turn off 2FA
- 2FA vs. email verification codes
- 2FA and SSO
- Frequently asked questions
How 2FA works
Two-factor authentication (2FA) adds a second step to signing in to your Rev.com account. After you enter your email and password, Rev asks for a 6-digit code from an authenticator app on your phone or tablet. Even if someone else has your password, they can't get into your account without that code.
When 2FA is on:
1. You sign in with your email and password as usual.
2. Rev asks for a 6-digit code.
3. You open your authenticator app, find the current code for Rev, and enter it.
Turn on 2FA
1. Go to your 2FA settings page and click Get Started.
2. Download and install an authenticator app on your phone or tablet. Rev supports Google Authenticator and Authy. Other standard authenticator apps that generate time-based codes should also work. The app generates codes even when your phone is offline.
3. In the Set up 2FA window, open your authenticator app and scan the QR code with your device's camera. If you can't scan it, click Can't scan it? in the window for another way to add Rev to your app. Then click Next.
4. Enter the 6-digit code shown in the app and click Verify.
5. You'll see Success! Your two-factor authentication has been saved. Your 2FA settings page now shows 2FA as on, along with the date you turned it on.
Signing in with 2FA
After you enter your email and password, enter the 6-digit code currently shown for Rev in your authenticator app. Codes are time-based and refresh every 30 seconds. If the code is about to expire, wait for the next one before you enter it.
Turn off 2FA
1. Go to your 2FA settings page.
2. Deselect the box next to the date 2FA was turned on.
You can turn 2FA back on at any time by following the steps in Turn on 2FA.
2FA vs. email verification codes
Some accounts are asked to enter a verification code sent to their email when signing in, for example from a new device or location. This email verification is separate from 2FA: it doesn't use an authenticator app, and you can't turn it on or off in your account settings.
If you'd rather not receive email verification codes, contact support@rev.com. Turning email verification off removes an extra check on your account, which we do not recommend. 2FA is optional and fully in your control.
2FA and SSO
If your team signs in with SSO (available on Enterprise/Unlimited plans), your identity provider's security settings, including multi-factor authentication, apply when you sign in. Rev's own 2FA setting doesn't apply to SSO sign-ins.
Frequently asked questions
Is 2FA required?
No. 2FA is optional, but we recommend it for added protection.
Which authenticator apps can I use?
Google Authenticator and Authy are supported. Other standard authenticator apps that generate time-based 6-digit codes should also work.
My code isn't working. What should I do?
Codes expire every 30 seconds, so enter the code shown in your app right now, not an older one. Also check that your phone or tablet's date and time are set to update automatically, since a clock that is off can cause valid codes to be rejected. If it still doesn't work, contact support@rev.com.
I got a new phone. What happens to my 2FA?
Authenticator apps tie your codes to the device. Before you switch phones, turn 2FA off, then turn it on again on the new phone.
Does 2FA work for everyone on my team?
2FA is a setting for each person's own account. If your team signs in with SSO, see 2FA and SSO.
Why Rev doesn't offer text message (SMS) codes
Rev supports authenticator apps only. Text message codes are less secure than app-generated codes because they can be intercepted, for example through phone number porting attacks, where someone transfers your number to a different SIM.