A password can be guessed, reused, or phished. Two-factor authentication means that even someone who has your password cannot get in without your phone.
Two minutes to set up. Once per device after that.
Setting it up
Settings → Account → Two-factor authentication → Enable.
NexReps shows a QR code. Open your authenticator app — Google Authenticator, Authy, 1Password, whichever you already use — and scan it. The app starts producing a six-digit code that changes every thirty seconds.
Type the current code into NexReps to confirm the pairing. If it is rejected, your phone's clock is probably off by more than a minute. Turn on automatic time and try again.
Signing in with 2FA on
Email, password, then the six-digit code from your app. That is it.
The code changes every thirty seconds. If it expires while you are typing, wait for the next one — do not retype the old one.
No signal, no problem
Authenticator apps do not need internet. The code is generated from a shared secret and the clock. On a plane, in a basement, on a dead SIM — it still works.
If you lose your phone
Only an admin can reset your 2FA. There is no self-service recovery, on purpose: a self-service path is a path an attacker can walk too.
Your admin removes 2FA from your account, you sign in with your password, you set it up again on the new phone.
If you are the only admin and you lose your phone, contact support at info@nexreps.com. Expect to prove who you are.
Setting up on a new phone
Same as the first time: your admin resets it, you scan a fresh QR code. The old secret dies with the old device.
Some authenticator apps sync across devices and restore automatically — 1Password and Authy do, Google Authenticator does if you enabled cloud backup. If yours does, you may find NexReps already there.
Why it matters here
NexReps holds your group's sales, your margins, your supplier prices. A stolen account is a competitor reading your P&L.
If your organization does not require 2FA yet, turn it on for yourself anyway.
Next
Install the app — NexReps on your phone.