How to turn on two-step verification for your dashboard

Two-step verification (also called 2FA or two-factor authentication) means signing in needs your password and a 6-digit code from an authenticator app on your phone. Anyone who steals your password still can't get into your dashboard, your clients or your payout settings. Setup takes about two minutes, and you get 10 single-use recovery codes you must save, because they're shown only once.

Before you begin#

• An authenticator app on your phone: Google Authenticator, Microsoft Authenticator, 1Password, Authy or similar.
• Your current password (or your Google sign-in, if you don't have a password).
• Somewhere safe to keep 10 recovery codes.
• The Levflex app asks for the code too. If it says to enter the 6-digit code but shows no box to type it, update the app.

Turn on two-step verification#

1. Select your name at the top right of the dashboard, then Sign-in & security. Owners and admins can also go to Settings → Security → Manage your sign-in & security.
2. Find the Two-step verification section. It says Off.
3. Select Set up two-step verification.
4. Open your authenticator app and scan the QR code. If you can't scan it, type the key shown after Can't scan? Enter this setup key.
5. Enter the code your app shows in 6-digit code.
6. Select Verify & turn on. You'll see: Two-step verification is on. Save your recovery codes now — they won't be shown again.
7. Select Copy codes or Download codes under Your recovery codes, and store them safely.

Turning it on signs you out of every other device, on the web and in the app. Each one asks for your password and a code next time. Levflex also emails you Two-step verification is on.

In the Levflex app#

Owners, admins and trainers use the same screens as members.

1. Tap the Account tab, then Sign-in & security.
2. Tap Set up two-step verification, then Open in authenticator app (or Copy setup key to add it by hand).
3. Enter the code in 6-digit code and tap Verify & turn on.
4. Tap Copy codes or Share codes, save them, then tap I've saved my codes.

When you sign in to the app, enter the code on the Two-step verification screen and tap Verify & sign in, or tap Use a recovery code instead. Get new recovery codes, Turn off two-step verification and Sign out of all devices are on the same Sign-in & security screen.

Signing in with two-step verification#

1. Enter your email and password (or select Continue with Google) as usual.
2. Enter the code from your app in 6-digit code from your authenticator app on the Two-step verification page.
3. Select Verify & Sign In.

No phone? Select Use a recovery code instead and enter one code in Recovery code. Each code works once. The step expires after 10 minutes, so start again from the sign-in page if it does.

Get new recovery codes#

1. Open Sign-in & security and expand Get new recovery codes.
2. Enter your Current password, or a code in Or a code from your app.
3. Select Create new recovery codes. Your old codes stop working, so save the new ones.

The section shows how many codes are left, for example 8 of 10 recovery codes left.

Turn off two-step verification#

1. Expand Turn off two-step verification.
2. Enter your Current password or a code from your app.
3. Select Turn off. This signs out every other device.

If your gym requires two-step verification for its team, you'll see: Your gym requires two-step verification for its team, so it can't be turned off.

Common mistakes#

Not saving the recovery codes#

The codes are shown once, right after setup. If you closed the page without saving them, create new ones straight away from Get new recovery codes while you still have your phone.

Storing the codes only on the same phone#

If the phone is lost, the codes go with it. Keep them in a password manager, or printed and stored somewhere safe.

Using an old version of the Levflex app#

Older versions of the app don't have the code screen. If the app says to enter the 6-digit code but shows no box to type it, update the Levflex app from the App Store or Google Play. Until then, sign in on your gym's website in your phone's browser.

Typing an old code#

Codes change every 30 seconds. Wait for a fresh one and enter it before it changes. After 5 wrong codes, start the sign-in again.

Troubleshooting#

• Does Verify & turn on say the code is wrong?
  • Yes
    Check that your phone sets its time automatically, then enter a fresh code.
  • No
    Go to the next question.
• Did you lose your phone or change phones?
  • Yes
    See Lost your phone or recovery codes.
  • No
    Go to the next question.
• Did you get a two-step verification email you didn't expect?
  • Yes
    Select WASN'T ME — LOCK MY ACCOUNT in the email, then see If you think your account was hacked.
  • No
    You're set. Check Sign-in & security any time to see the status.

When it's on, Sign-in & security shows: On. Signing in needs your password and a code from your authenticator app. To protect the whole team, see How to require two-step verification for staff.