Plenix Cloud for iPhone

What it is

Plenix Cloud is a native iPhone app (iOS 16 or later) that receives two-factor push requests for your workspace and lets you approve or deny them. It is the iPhone counterpart of the Android app. For day-to-day work, use the web app or the installable PWA.

The app is rolling out through Apple's App Store review. Your workspace's Settings → Security → Two-Factor Authentication page lists it as soon as it can be installed.

Setting it up

1. Make sure you have set up an authenticator app for your account (it stays as your fallback).
2. Open Plenix Cloud, enter your workspace name (the part before .plenix.cloud), your email and password, then the 6-digit code from your authenticator app.
3. Allow notifications when asked. The app enrols itself, and the phone appears in your device list on the web, where you can send a test request.

Approving a sign-in

1. Start signing in from a browser. The browser shows a number.
2. Tap the Plenix sign-in request notification on your iPhone. The app opens and shows which workspace the request is for.
3. Type the number from the browser and tap Approve. Your iPhone then asks for Face ID, Touch ID or your passcode.
4. If you didn't start the sign-in, tap Deny — this wasn't me. Plenix will ask for a new password at the next sign-in.

Requests expire after about 90 seconds. A wrong number denies the request for your safety; start the sign-in again in your browser.

How it keeps your account safe

• The key stays on the phone. When you sign in, the app creates an approval key in the iPhone's secure hardware. It cannot be copied, backed up or moved to another phone, and iOS only lets the app use it after Face ID, Touch ID or your passcode.
• Every answer is signed. Plenix accepts an approval or denial from your iPhone only if it carries a signature from that key, so a copied notification can't be used to answer for you.
• Nothing to approve from the lock screen. Approving always opens the app and needs the number.
• The app's screen is hidden in the app switcher and while your screen is being recorded or shared.

Removing the phone

• Sign out in the app, or remove the phone under Settings → Security → Two-Factor Authentication on the web. Either way the phone stops receiving requests and its approval key is destroyed.
• Deleting the app and reinstalling it starts fresh: you sign in again and a new key is created.

Where to go next

• Two-Factor Authentication: Code, Push or Both
• Plenix Mobile App for Android