Set up an authenticator with a QR code
MFA protects sign-in. Email codes, authenticator codes and recovery codes serve different purposes.
Instructions reviewed
Current workspace availability, quotes and permissions apply. The review date is not a live provider status. Reading help makes no checks or payments.
Before you start
- Sign into the correct workspace. Install a TOTP authenticator and enable automatic phone time. Staff use /internal/security/mfa.
Follow these steps
Start setup. In your authenticator choose Add account and Scan QR code. Keep the QR private.
You should see: A GridZen account generates six-digit codes every 30 seconds. Manual setup is available if scanning fails.
Enter the current six-digit authenticator code. Do not enter an email code or the long setup key.
You should see: First setup shows recovery codes; existing setups proceed to the workspace.
Save recovery codes and continue. Use an unused recovery code only in the official recovery field if the authenticator is lost.
You should see: Protected pages open. Do not share recovery-code screenshots.
Completion check
Sign out and back in with a fresh authenticator code. Keep MFA enabled.
If you get stuck
- Invalid code: check automatic time and the correct account, then try the next code; honor rate-limit messages.
- Cannot scan: expand manual setup. Never upload the QR or key to another website.
Next steps and related guides
Unclear step? Report its location
Include the guide, step, visible message and expected outcome. Redact screenshots. Do not include codes, keys, identity documents, full accounts or customer records.
open@gridzen.ai