2FA: Two-step authentication

What is 2FA?

Two-step authentication (2FA, short for “Two-Factor Authentication”) is an extra security layer that verifies your identity every time you sign in to Envia.com. In addition to your password, you need a temporary code generated by an app on your phone. That way, even if someone gets your password, they cannot access your account without that second factor.

Benefits

Prevention of cyberattacks	Makes unauthorized access to information systems more difficult.
Protection against unrecognized access	Prevents sign-ins from unknown devices.
Reduced risk of account theft	Only the authorized user can access using a code.
Greater control and security	Only you will have access to your account through a verification code.

Turning on 2FA is an effective way to protect your accounts and ensure that only you have access to your personal information.

How does it work?

On Envia.com we use an authentication method with a QR code, adding an extra layer of security for users who choose to turn it on. The process is as follows:

1. Sign in to your Envia.com account

2. If you have 2FA on, the platform will ask for the verification code generated by your app.

3. You enter the code and access your account.

   Note

   Your device will be remembered for 30 days. After that period, or if you sign in from a new device, the code will be requested again.

Turn on 2FA

You need an authenticator app installed on your phone. It is a free app that generates temporary codes to verify that you are the one signing in. The most used are Google Authenticator and Authy, available on the App Store and Google Play.

1. Sign in to your Envia.com account.

2. In the side menu, go to Settings > My account.

3. Select the Security tab.

4. On the Two-factor authentication card, click Add +.

5. A window will open with instructions. You have two options to link your app:

   • Scan the QR code: open your authenticator app, select Add account, and scan the code on the screen.
   • Manual code: if you cannot scan the QR, copy the alphanumeric code that appears below and enter it manually in your app.

6. Your app will generate a 6-digit code. Enter it in the Code field and confirm.

   Note

   If the 2FA setup screen appears when you sign in and you do not want to configure it at that moment, you can skip it temporarily. You can turn it on later from Settings > My account > Security.

Remove 2FA

Note

When you turn off 2FA, your account will be protected only by your password. Only do this if you have a justified reason.

1. Sign in to your Envia.com account.
2. In the side menu, go to Settings > My account.
3. Select the Security tab.
4. On the Two-factor authentication card, click the delete icon.
5. In the pop-up window, click Delete to confirm.

Passkey authentication

In the same Settings > My account > Security section you will find a second option: Passkey authentication. This is an alternative way to verify your identity using your device (fingerprint, Face ID, or a physical security key) instead of an authenticator app.

Note

This option is independent of 2FA with an app. You can have both on, or only one.

Recover access if you lost your device

If you no longer have access to your authenticator app (you lost the phone, uninstalled the app, or changed devices), you will not be able to generate the verification code. In that case:

1. On the sign-in screen, enter your email and password.
2. When the 2FA code is requested, look for the option Don’t have access to your device? or similar.
3. If that option does not appear, contact Envia.com support so an agent can turn off 2FA on your account securely.

Frequently asked questions

Can I turn off 2FA if I already had it configured? Yes. Go to Settings > My account > Security and remove the authentication method from the Two-factor authentication card.

Can I change another user’s 2FA settings in my company? No. 2FA is each user’s individual responsibility. For security and privacy, no user can see or change another user’s 2FA settings, even if they belong to the same company.

Which authenticator apps are compatible? Any app that generates temporary one-time codes, such as Google Authenticator, Authy, or Microsoft Authenticator. All are free and available on the App Store and Google Play.

How often does the verification code change? Codes are temporary and refresh every 30 seconds. If you enter the code and it does not work, wait for your app to generate a new one and try again.

What if I change phones? You will need to link your new authenticator app again. If you no longer have access to the previous app, see the “Recover access if you lost your device” section of this article.