TOTP Authenticator Setup

TOTP (Time-based One-Time Password) is the most popular and recommended method for multi-factor authentication. This guide covers setting up TOTP with various authenticator apps.

How TOTP Works

TOTP generates a new 6-digit code every 30 seconds:

1. When you set up TOTP, you scan a QR code or enter a secret key
2. Your authenticator app stores this secret
3. The app uses the secret and current time to generate codes
4. The same algorithm on our servers verifies your codes

Choosing an Authenticator App

Google Authenticator

Best for: Simple, straightforward authentication

• Free, no account required
• Available on iOS and Android
• Clean, minimal interface
• No cloud backup (manual export available)

Authy

Best for: Multi-device users and cloud backup

• Free with cloud sync
• Desktop app available
• Encrypted backups
• Multiple device support

1Password

Best for: Password manager users

• Integrated with password management
• Automatic code filling
• Cross-platform sync
• Premium subscription required

Microsoft Authenticator

Best for: Microsoft 365 users

• Free with Microsoft accounts
• Push notifications for Microsoft services
• Cloud backup with Microsoft account
• Password manager features included

Bitwarden

Best for: Open-source advocates

• Open-source password manager
• TOTP included in premium plan
• Self-hosting option
• Cross-platform support

Setup with Google Authenticator

Manual Entry (Google Authenticator)

If you can't scan the QR code:

1. Click Can't scan? Enter key manually in Zenovay
2. In Google Authenticator, tap + → Enter setup key
3. Enter:
   • Account: Your email or "Zenovay"
   • Key: The secret key shown in Zenovay
4. Tap Add

Setup with Authy

Setup with 1Password

Time Synchronization

TOTP requires accurate time on your device. If codes aren't working:

Android

1. Open Settings → Date & Time
2. Enable Automatic date & time
3. Enable Automatic time zone

iOS

1. Open Settings → General → Date & Time
2. Enable Set Automatically

Google Authenticator Time Sync

1. Open Google Authenticator
2. Tap ⋮ (menu) → Settings
3. Tap Time correction for codes
4. Tap Sync now

Transferring to a New Phone

Google Authenticator

1. On old phone: ⋮ → Transfer accounts → Export accounts
2. Select Zenovay
3. On new phone: + → Scan QR code
4. Scan the transfer QR code from old phone

Authy

1. Install Authy on new device
2. Log in with your phone number
3. Enter verification code
4. Enter backup password
5. All accounts restore automatically

Manual Re-setup

If you can't transfer:

1. Log in to Zenovay with a backup code
2. Disable existing TOTP
3. Set up TOTP again with new device
4. Generate new backup codes

Best Practices

Security

• Use a reputable app: Stick to well-known authenticators
• Enable app lock: Use biometrics or PIN for the authenticator app
• Backup your codes: Keep backup codes in a secure location
• Consider backup authenticator: Set up on a secondary device

Recovery Planning

• Store backup codes securely: Password manager, safe, or encrypted file
• Document your setup: Know how to recover each service
• Test recovery process: Periodically verify backup codes work

Troubleshooting

Code Invalid

1. Wait for the next code (changes every 30 seconds)
2. Check device time is synchronized
3. Verify you're looking at the correct account
4. Try manual time sync in app settings

Lost Access to Authenticator

1. Use a backup code
2. Contact support with identity verification
3. Re-setup TOTP after recovery

Multiple Zenovay Entries

If you have duplicate entries:

1. Identify which one works
2. Delete the non-working entry
3. If both fail, disable and re-setup MFA

Next Steps

• Save your backup codes
• Consider adding WebAuthn as backup
• Review security best practices