Setting up two-step verification
Authenticator codes, recovery codes, and what to do if you lose your phone.
VitalFax supports authenticator-app codes. Enrolment happens during sign-in when your organization expects it, and can be started from your security settings at any time.
Setting it up
1. Open Settings → Security. 2. Scan the code with any authenticator app — Google Authenticator, 1Password, Authy, whichever you already use. 3. Enter a code from the app to confirm it is working. 4. Save the recovery codes. They are shown once.
Recovery codes
Each code works once. They exist for the case where your phone is lost or replaced, and they are the only way back into your own account.
Store them somewhere other than the device running the authenticator. Codes kept in a note on the same phone protect against nothing.
If you have lost both
An administrator in your organization can reset your two-step verification. VitalFax support cannot — we have no way to verify over email that someone asking is who they say they are, and an identity-proofing process we cannot perform reliably is one we should not pretend to offer.
If you are the only owner and have lost access, contact support and expect to be asked for evidence of control over the organization.
This is about /app/settings/security in the application. You will need to be signed in.
Last reviewed 2026-10-28. Help articles live in the VitalFax repository and are changed alongside the behaviour they describe, so an article and the product cannot drift apart unnoticed.