Recovery codes and trusted devices in Leadnote

Recovery codes are ten one-time codes that let you sign in when you cannot reach your authenticator app. A trusted device is a browser you have told Leadnote to remember, so it skips the 6 digit code for 30 days. Both belong to two-factor authentication and are managed on the same screen.

Where to find them

Open Settings, then My Profile, then the Security tab. The Two-factor authentication card shows:

• Recovery codes left, for example "8 of 10". A Running low label appears when two or fewer are left.
• Trusted devices, the number of browsers currently remembered.

Below the card, a separate Trusted devices card lists those browsers. It appears only while two-factor is on.

Recovery codes

Leadnote shows the ten codes once, at the end of setup. They look like k3x9d-2mq7a. When you type one, capital letters, spaces and the dash do not matter.

Store them somewhere safe and private, such as a password manager or a printout in a locked drawer. Do not keep them in the same place as your phone's only copy.

Sign in with a recovery code

1. Enter your email and password.
2. On the Two-step verification screen, select Use a recovery code.
3. Enter one unused code and select Verify and sign in.

The code is now spent. Leadnote emails you that a recovery code was used and how many remain. If you did not do this, change your password at once, see change or reset your password.

A recovery code also works while your authenticator codes are locked after five wrong tries.

Generate a new set

Make a new set when you are running low, or when you think someone saw your codes.

1. Open Settings, My Profile, Security.
2. In the Two-factor authentication card, select New recovery codes.
3. Enter your password and a current 6 digit code from your authenticator app.
4. Select Generate codes, then copy, download or print the new codes.

What to do when your phone is lost

Take these steps in order:

1. Sign in with a recovery code.
2. Open Settings, My Profile, Security and select Turn off two-factor. Enter your password and a second recovery code.
3. Select Turn on two-factor and set it up again on your new phone.

This path uses two recovery codes. If you have only one left, or none, ask your Account Owner or a Manager to open Users and select Reset two-factor on your row. The reset removes your authenticator, codes and trusted devices and signs you out everywhere. An Account Owner who is locked out should contact support.

Trusted devices

On the code step of sign-in, you can tick Trust this device for 30 days. Leadnote then remembers that browser. For the next 30 days it asks for your password only, and skips the code.

The same tick box appears if your organisation forces you to set up two-factor at sign-in.

Trusting is per browser. A different browser, a private window, or a browser whose site data you cleared will ask for the code again. The mobile app is never treated as a trusted device. It asks for the code at every new sign-in.

See and remove trusted devices

The Trusted devices card lists each browser with its device name, address, Last used time and Trusted until date. A browser past its date shows Expired.

• To forget one browser, select Remove on its row and confirm. It will ask for a code next time.
• To forget all of them, select Remove all and confirm.

Remove a device when you stop using it, when you lose a laptop, or when you signed in on a shared computer by mistake.

When Leadnote removes them for you

Trusted devices are cleared automatically when:

• you turn two-factor off, or someone resets it for you;
• you change your password and leave "Keep my other sessions signed in" unticked;
• you finish a password reset from the email link;
• your user is deactivated.

After any of these, every browser asks for a code at its next sign-in.

Related

To see every place you are signed in, and to sign a browser out, read sessions and devices. Owners and Managers who want everyone to use two-factor can read require two-factor for your team.