Two-step verification

Two-step verification adds a second check when you sign in: besides your password, Guilda Work asks for a 6-digit code generated by an app on your phone. That way, even if someone finds out your password, they cannot get in without your phone. It is optional: each person decides whether to turn it on.

Turn it on

1. Go to Settings › Password and email and find the Two-step verification section.
2. With an authenticator app (Google Authenticator, Microsoft Authenticator, Aegis, 1Password…), scan the QR code. If you can't scan it, type the key shown below into the app.
3. Enter the 6-digit code the app shows and save.

Keep the recovery codes

Under Recovery codes, generate your codes and keep them somewhere safe (for example, your password manager): they are 12 single-use codes that let you sign in if you lose your phone, and they are shown only once. Confirm to activate them.

Signing in with verification on

1. Sign in with your email and password as usual.
2. Enter the 6-digit code from the app.
3. If you don't have your phone, open No phone at hand? Use a recovery code and type one of your codes. Each code works only once.

If you lose your phone and the codes

Contact your administrator or support: after checking it is you, they can remove your two-step verification from the backoffice. You will sign in with just your password again and can turn it back on.

Connected apps and the mobile app

• Apps you connect with an API token or through MCP do not change.
• If you connect ChatGPT or Claude, you will be asked for the code when authorising the app, just like when signing in.
• The mobile app does not ask for this code yet: phones that are already signed in keep working, but signing in again on the mobile app will need a version that supports it.