How to turn on two-step sign-in (2FA)
Protect your Estate CRM account with two-step sign-in. Set up an authenticator app, save your recovery codes and require 2FA for your whole agency.
Two-step sign-in asks for a code from your phone after your password. Someone who steals your password still can’t open your clients’ details. This article shows how to turn it on for yourself and how to require it for the whole agency.
You need an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.
How do I turn it on for my account?
- Open the menu with your name at the bottom of the sidebar and choose My profile.
- In Two-step sign-in, press Turn on.
- Scan the QR code with your authenticator app. If you can’t scan it, type in the key shown under Can’t scan? Enter this key:.
- Enter the 6-digit Code the app shows and press Turn on.
- Save your recovery codes. Use Copy or Download to save them, then press I’ve saved them.
From now on, after your password, the sign-in page asks for the 6-digit code from the app.
What are recovery codes for?
You get 8 recovery codes. If you lose your phone, each code signs you in once. On the sign-in page, choose Use a recovery code and type one in. Keep them somewhere safe, away from your phone. They are shown only once.
To get a fresh set, press New recovery codes on My profile and enter your password. Your old codes stop working.
How do I move to a new phone?
Sign in with your old phone or a recovery code. Then press Turn off, enter your password, and turn two-step sign-in on again with the new phone.
How do I require it for everyone in the agency?
Owners can make two-step sign-in required for the whole team:
- Turn it on for your own account first.
- Open Agency settings and go to Security.
- Switch on Require two-step sign-in for everyone in the agency.
After that, anyone who hasn’t set it up yet is asked to turn it on before they can keep working. It takes about a minute with the app. Their My profile page stays open so they can do it.
This is a simple way to protect client data and GDPR-sensitive details across your estate agency.