To ensure that your account is as secure as possible, Belvo requires that you set up two-factor authentication in your dashboard before going to the production environment.
Note: At the moment, Belvo only supports two-factor authentication using an authenticator app (such as Google Authenticator or Microsoft Authenticator).
If you lose access to your authenticator app and to your recovery codes, you will have to contact Belvo support.
Setting up two-factor authentication
To set up two-factor authentication:
- In your dashboard, go to Settings → Profile.
- In the Two-Factor Authentication panel, click Add next to the method you would like to add.
- Scan the QR code with your authenticator app and click Continue.
- Enter the code generated in your authenticator app and click Confirm.
- Make sure to save a copy of your recovery codes and then click Done.
Note: Please store your recovery codes in a safe place! If you lose access to your device, you will need the recover codes in order to access your Belvo account.
Done! In the Two-Factor Authentication panel you will now see Enabled in the Status column and you will also receive an email confirming your two-factor authentication.
Updating a two-factor authentication method
If you change the authenticator app you use for multi-factor authentication, you will need to update the authentication method in your Belvo dashboard.
To update your authentication method:
- In your dashboard, go to Settings → Profile.
- In the Two-Factor Authentication panel, click Update next to the method you would like to update.
- Scan the QR code with your authenticator app and click Continue.
- Enter the code generated in your authenticator app and click Confirm.
- Make sure to save a copy of your recovery codes and then click Done.
Note: Please store your recovery codes in a safe place! If you lose access to your device, you will need the recover codes in order to access your Belvo account.
Removing a two-factor authentication method
As long as you do not have access to a Production environment, you can remove a two-factor authentication method from your Belvo account.
Note: You can only remove a device-generated authentication method (TOTP).
To remove a two-factor authentication method:
- In your dashboard, go to Settings → Profile.
- Next to the method you want to remove, click on the X.
- Enter your password to confirm that you want to remove this method.
Done!