Overview

Two-factor authentication (also called MFA) adds a second check to your sign-in, so your account stays protected even if someone learns your password. After the one-time setup below, you will enter a short code from your phone each time you log in.

This guide covers enrolling, signing in afterwards, and what to do if a code is not accepted.

Before you start

Make sure you have:

  • An authenticator app on your phone. Microsoft Authenticator (iOS or Android) is recommended, but any TOTP app that can scan a QR code will work.
  • Automatic network time enabled on your phone. Codes are generated from the clock, so even a small drift will cause them to be rejected.
  • Your BraveGen username and password, so you can sign in and reach your profile.

Enable MFA (one-time setup)

  1. Sign in to BraveGen CSR.
  2. Go to Your Profile → Setup Two-Factor Authentication.
  3. On your phone, open Microsoft Authenticator and choose Add account → Other (or Work/School) → Scan QR code.
  4. Scan the QR image shown on the Setup MFA page. If your phone cannot scan it, type the Manual entry code into the app instead.
  5. The app will now show a 6-digit code that refreshes every 30 seconds.
  6. Enter the code currently displayed into the Setup MFA page, then select Verify & Enable.
  7. You will see a confirmation that MFA is on. Your secret is stored securely on the server, so you do not need to keep a copy of it.

Signing in from now on

Signing in works the same way as before, with one extra step. Enter your username and password as usual, then — when prompted — open your authenticator app and enter the 6-digit code it is showing. That is it: you are signed in.

If your code is not accepted

Work through these in order; the first two resolve most cases.

  • Check the code is still current. Codes expire every 30 seconds. If the timer is nearly up, wait for the next one and use that.
  • Check your phone’s clock. It must be set to automatic network time. An incorrect device clock is the most common cause of rejected codes.
  • If you used manual entry, confirm the secret was copied exactly, with no extra spaces.
  • Re-enrol. Remove the account from your authenticator app, then repeat the setup steps and scan the QR code again.

If codes still fail after that, contact BraveGen support and ask for an MFA reset on your account.

Keeping your account secure

  • Never share your 6-digit codes or your secret with anyone, including in support requests. BraveGen support will never ask for them.
  • Protect the authenticator app with your phone’s PIN or biometrics.
  • If you lose access to your phone or cannot sign in, contact your organisation’s administrator or BraveGen support to have MFA reset.