How to set up two-factor authentication

Two-factor authentication adds an authenticator code to the sign-in process for your Kiravo client account. It protects access to billing, services, and tickets. WordPress and hosting control-panel security are managed separately.

Before starting, have an authenticator app ready and make sure you can access it when you next sign in. Keep your current client-area session open until setup is complete.

Configure the authenticator

1. Sign in to the Kiravo client area.
2. Open Security, then Multi-factor auth.
3. If two-factor authentication is not configured, the page shows Multi-factor authentication is not configured yet! and the Google Authenticator module.
4. Click Activate for that module and follow the setup instructions. Scan the QR code with your authenticator app, then enter the verification code when requested.
5. Complete the confirmation shown by the setup screen. Returning to the module page or seeing a QR code alone is not proof that activation finished.
6. Check the resulting authentication status. If setup provides recovery codes, store them somewhere private that you can access if the authenticator is lost.

Keep the setup secret

The QR code and setup key can let another person generate your sign-in codes. Do not publish them, include them in a support ticket, or share screenshots of the setup screen. Treat recovery codes as private credentials too.

If a code is rejected

Make sure you selected the Kiravo entry in your authenticator. Check that the device uses automatic date and time, wait for a fresh code, and enter it before it expires. Follow any error message shown by the sign-in form.

If you lose access to the authenticator, use a recovery option only if one was provided during setup. Otherwise contact Kiravo through the contact page for account recovery. The team may need to verify ownership. Do not send your password, setup key, or current code.

Review the available security controls before replacing your phone or removing an authenticator entry. Deleting the entry from your app does not by itself disable two-factor authentication on Kiravo.