How to turn on two-step verification for your gym account

Two-step verification (also called 2FA or two-factor authentication) adds a 6-digit code from an authenticator app on your phone to your password. Even if someone learns your password, they can't sign in to your account, see your bookings or use your credits. Setup takes about two minutes on your gym's website or in the Levflex app, and you get 10 recovery codes that are shown only once.

Before you begin#

• Use your gym's website (the portal) or the Levflex app. Both use the same setting.
• Install an authenticator app: Google Authenticator, Microsoft Authenticator, 1Password, Authy or similar.
• Have somewhere safe for 10 recovery codes, such as a password manager.
• If the app has no Sign-in & security row under Account, update the Levflex app first.

Turn on two-step verification on the web#

1. Sign in to your gym's portal and open Account (in the menu it's Account & notifications; on a phone, the Account tab).
2. Scroll to Sign-in & security.
3. Select Set up two-step verification under Two-step verification.
4. Scan the QR code with your authenticator app. If you can't, type the setup key shown under it.
5. Enter the code from the app in 6-digit code and select Verify & turn on.
6. Select Copy codes or Download codes under Your recovery codes, and keep them safe.

Turn on two-step verification in the Levflex app#

1. Tap the Account tab, then Sign-in & security (under Password).
2. Tap Set up two-step verification.
3. Tap Open in authenticator app to add your account in one tap. If no app opens, tap Copy setup key and add the key by hand in your authenticator app.
4. Enter the code the app shows in 6-digit code and tap Verify & turn on.
5. Tap Copy codes or Share codes under Your recovery codes, save them, then tap I've saved my codes.

If you leave setup halfway, Sign-in & security shows Setup isn't finished, with Continue setup and Cancel setup.

Turning it on signs you out of every other device, including the website and the app on other phones, and emails you Two-step verification is on. The app you used to turn it on stays signed in.

Sign in with two-step verification#

1. Enter your email and password. On the web you can also select Continue with Google; the app uses email and password only.
2. Enter the code in 6-digit code from your authenticator app. In the app, it signs you in as soon as you type 6 digits.
3. Select Verify & Sign In on the web, or tap Verify & sign in in the app. No phone? Select Use a recovery code instead.

Other settings in Sign-in & security#

The same options are on the web and in the app.

• Get new recovery codes: enter your Current password or a code from your app, then select Create new recovery codes. Old codes stop working.
• Turn off two-step verification: enter your Current password or a code, then select Turn off. Every other device is signed out.
• Sign out of all devices: signs you out everywhere, including this browser or phone. On the web the sign-in page then shows You're signed out of all devices; the app goes back to your gym's screen.

Common mistakes#

Closing the page before saving the codes#

The codes appear once. If you missed them, use Get new recovery codes right away.

Using an old version of the app#

Older versions of the Levflex app don't have the code screen. If the app says to enter the 6-digit code but shows no box to type it, update the app from the App Store or Google Play. Until then, sign in on your gym's website.

Using a code that just changed#

Codes refresh every 30 seconds. Enter a fresh one.

Troubleshooting#

• Does the code keep failing?
  • Yes
    Make sure your phone sets its time automatically, then try a fresh code.
  • No
    Go to the next question.
• Did you lose the phone with your authenticator app?
  • Yes
    See Lost your phone or recovery codes.
  • No
    You're set.

When it's on, Sign-in & security shows On and how many recovery codes are left, on the web and in the app.