Signing in

The user enters their username and password as usual. If two-factor is set for them, a second page asks for the code.

<!-- SCREENSHOT: Two-factor sign-in page, code field, Verify button -->

• Email code - the code arrives by email, with the subject "sign-in code". If it does not arrive, Send a new code sends another one.
• Authenticator app - open the app and type the 6-digit code shown for Datagate. Spaces do not matter.

Setting up the authenticator app

The first time after the administrator chose Authenticator app, the sign-in shows a setup page instead of the code page:

1. Install an authenticator app on the phone: Google Authenticator, Microsoft Authenticator, or any other TOTP app.
2. In the app, add an account and scan the QR code on the screen. If the camera cannot be used, type the key shown under the code.
3. Enter the 6-digit code the app now shows, and press Confirm and sign in.

<!-- SCREENSHOT: Set up the authenticator app page with the QR code -->

The setup is done on the web sign-in page. The till does not show a QR code: set up the app on the web first.

Recovery codes

Right after the setup, Datagate shows 10 recovery codes. Each signs the user in once, instead of the app code - for the day the phone is lost, broken or forgotten at home.

They are shown only this one time. Print them or keep them somewhere safe, away from the phone.

<!-- SCREENSHOT: Save your recovery codes page -->

To use one, type it in the code field instead of the app code. When they run out, or are lost, the administrator resets two-factor and the user sets up the app again, which gives new codes.

Remember me on this device

With Remember me on this device ticked, the user stays signed in and is not asked for the code again on that browser for 7 days. After that, or after signing out, the code is asked again.

Do not tick it on a shared computer. The administrator cancels it on every device by changing or resetting the user's two-factor.

When something goes wrong