Two-Factor Authentication

Two-factor authentication (2FA) adds a second step to signing in to Sparrow Intel. After your password, you enter a 6-digit code from an authenticator app on your phone, so a stolen password isn't enough to get into your account.

You can use any authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password. You enter a code each time you sign in, not every time you open a page.

Turn on two-factor authentication

1. Install an authenticator app on your phone if you don't already have one.
2. Click on your profile icon in the top-right corner.
3. Click on "Account" from the dropdown.
4. Click on the "Security" tab.
5. Click "Set up two-factor authentication", enter your password and click "Continue".
6. Scan the QR code with your authenticator app. If you can't scan it, type the key shown below the QR code into your app instead.
7. Enter the 6-digit code your app shows and click "Verify".
8. Save your recovery code somewhere safe, such as a password manager. Tick "I saved my recovery code" and click "Continue".

Note: Your recovery code is shown only once. It's the only way to sign in without your phone, so keep it somewhere other than your phone.

If you close the window before you finish, you'll be asked to finish setting up two-factor authentication the next time you sign in.

Sign in with two-factor authentication

1. Enter your email and password as usual.
2. Open your authenticator app and find the Sparrow Intel entry.
3. Enter the 6-digit code it shows and click "Verify".

Codes change every 30 seconds, and each code works only once. If a code doesn't work, wait for the next one and try again.

Lost your phone?

On the sign-in screen, click "Lost your phone? Use a recovery code" and enter your recovery code.

After you sign in, Sparrow Intel shows you a new recovery code. Save it, because your old one no longer works.

If you've lost both your phone and your recovery code, ask an account Owner to reset your two-factor authentication (see below), or contact our support team.

Turn off two-factor authentication

1. Go to "Account" and click on the "Security" tab.
2. Click "Turn off two-factor authentication".
3. Enter your password and the current code from your authenticator app, then click "Turn off".

Note: If your account requires two-factor authentication for everyone, you can't turn it off.

For account Owners

Require two-factor authentication for everyone

1. Go to "Account" and click on the "Security" tab.
2. Under "Account security", turn on "Require two-factor authentication for everyone".
3. Click "Require two-factor authentication" to confirm.

Everyone on your account, including you, is signed out and asked to set up an authenticator app the next time they sign in.

Note: Only users who can manage team members (Owners, by default) can change this setting. Everyone else sees it as read-only.

If you use one login for several Sparrow Intel accounts, you'll need two-factor authentication whenever any of those accounts requires it. To learn more about using one login for several accounts, read Superusers: One Login for Multiple Accounts.

Reset a team member's two-factor authentication

If a team member loses their phone and their recovery code, you can reset their two-factor authentication:

1. Go to "Account" and click on the "Team Members" tab.
2. Find the user. The "2FA" column shows "On" for users who have two-factor authentication turned on.
3. Click the reset icon in the "Actions" column, then click "Reset" to confirm.

Their authenticator app and recovery code are removed. If two-factor authentication is still on or required for them, they set it up again the next time they sign in.

Note: You can't reset your own two-factor authentication from this table. To change your own, use the "Security" tab.