Two-Factor Authentication: Code, Push or Both
Choose Code only, Push only or Push + code for sign-in, what each one allows, and how backup codes get you in if you lose your phone.
Choose how you sign in
Every Plenix account has two-factor authentication. You choose how the second factor works from Settings → Security → Two-Factor Authentication. Whatever you pick is applied exactly, on the web sign-in page and in the mobile apps:
- Code only: enter a 6-digit code from an authenticator app like Google Authenticator or Authy. No push requests are sent.
- Push only: approve a matching-number request on your phone. Authenticator codes are not accepted at sign-in.
- Push + code: a push request is sent to your phone first, and the authenticator code box is shown alongside it, so you can use whichever is quicker.
An administrator can set and lock the method for an account. Locked methods can't be changed on the settings page.
Setting up authenticator codes
Every account enrols an authenticator app first. Scan the QR code with your authenticator app and enter a code once to confirm setup. Save the backup codes shown at that point somewhere safe.
On Push only, the authenticator code keeps working until at least one phone is enrolled for push, so you can't lock yourself out by switching before your phone is set up.
Lost your phone?
Single-use backup codes work in every mode, including Push only. On the sign-in screen choose Lost your phone? Use a backup code. Then remove the old phone (see below) and enrol your new one.
Setting up push approval
Push approval needs at least one registered device to send the prompt to:
- Browser push — click Enable browser notifications on the device you sign in from most. This uses your browser's own push permission (no app install).
- Android phone — install the Plenix Mobile app and sign in once; the app registers itself to receive push approvals.
- iPhone — install the Plenix Cloud iPhone app and sign in once; it enrols itself and asks permission to send notifications.
Approving a sign-in with push
- Sign in with your email and password as usual.
- Plenix shows a two-digit number on the sign-in screen and sends a prompt to every device you've registered.
- On your phone or browser, enter or confirm the number and tap Approve. The number is always required. On iPhone, approving also asks for Face ID, Touch ID or your passcode; on Android you can turn on a fingerprint or face check as well. These checks are added to the number, never a replacement for it.
- If nothing arrives within about 90 seconds, tap Send another request. On Push + code you can also type your authenticator code instead.
Denying a request, or entering the wrong number, flags the account and forces a password reset before anyone can sign in again, in case it wasn't you.
Managing your devices
Settings → Security → Two-Factor Authentication lists every device registered for push approval, with a Remove this device option for any you no longer use — for example after replacing a phone. Removing an iPhone also destroys its approval key the next time the app opens. Removing a device only stops it receiving push prompts; it doesn't disable two-factor authentication itself.
Where to go next
Was this article helpful?