Skip to main content

Signing In with 2FA

If your owner account uses two-factor authentication, signing in has two steps: password, then code.

Sign-in steps​

  1. Enter your email and password as usual, then submit.
  2. If the password is correct and 2FA is on, Etalasse does not sign you in yet. The screen changes to Enter the 6-digit code.
  3. Open your authenticator app and type the 6-digit code for Etalasse. It submits automatically once 6 digits are entered.
  4. If you do not have your phone, choose Use a recovery code and type one of your 10 recovery codes (upper or lower case, dashes or spaces do not matter).
Sign-in with 2FA: email and password, then the 6-digit code or a recovery code, then the Dashboard; below, the attempt limitsLogin to your accountEmailayu@kopisenja.idPasswordLoginTwo-factor authenticationEnter the 6-digit code fromyour authenticator app.Authentication code4829VerifyUse a recovery codeBack to loginDashboardSigned incorrectcode OK5 wrong codesBack to the password screen10 wrong in a rowLocked for 15 minutesAfter 5 minutesStart again from password123
After a correct password, type (1) the 6-digit code or choose (2) Use a recovery code, and you land in (3) the Dashboard. Below: the attempt limits that send you back to the password or lock the code step.

After a correct password, type (1) the 6-digit code or choose (2) Use a recovery code, and you land in (3) the Dashboard. Below: the attempt limits that send you back to the password or lock the code step.

After a recovery-code sign-in, Etalasse shows how many recovery codes remain. If few are left, generate new ones.

Limits to know​

RuleDetail
Code screen time5 minutes after the correct password. After that, start again from the password
5 wrong codesThat attempt is cancelled; you return to the password screen
10 wrong codes in a rowThe second factor is locked for 15 minutes. While locked, even the correct password only shows a locked message with the remaining time
Reusing a codeNot possible. A code that was already accepted is refused. Wait for the next one (about 30 seconds)
Older codesAn older code inside the time window cannot be used after a newer one was accepted

A correct code or an expired lock resets the wrong-attempt counter. If you are locked, see Lost Phone or Locked Out.

There is also a per-IP attempt limit, as with normal login; if you see too many attempts, wait as the message says.

What does not change​

  • Staff (PIN or password), customer, and non-2FA logins do not ask for a code.
  • Forgot your password: a password reset does not bypass 2FA. After a reset you are still asked for a code at the next sign-in.

Older app versions​

Older versions of the Etalasse app do not know the code step. On an account with 2FA on, an old app only shows a login error message and cannot sign in. This is intentional, for safety. Update the app, or sign in through the web Dashboard.