Two-factor protection: what it is for and how not to lose it
A password can be seen, guessed or stolen along with your mailbox. With a second factor — a code from an app on your phone — a stolen password alone is no longer enough.
How it works
Once, you link your account to an authenticator app on your phone — Google Authenticator, for one. The app shows a six-digit code that keeps changing. To sign in you need that code as well as the password.
The codes are worked out on the phone itself: neither the internet nor SMS is involved.
What it is for in Nexora
- Without it an exchange key cannot be connected — so real funds cannot be traded.
- Before a key is added the app may ask for the code again — if a long time has passed since you last entered one.
- Paper mode does not need it: nothing is at risk there.
Setting it up
- Install an authenticator app on your phone.
- In Nexora open Settings, find “Two-factor authentication” and choose “Set up”.
- Scan the QR code with the app. If that fails, type in the key shown beside it. The Nexora app on a phone has an “Open in authenticator” button.
- Enter the code from the app to confirm.
- Save the recovery codes.
Recovery codes
After set-up the app shows ten recovery codes — for the day you lose access to your authenticator app. Each works once. They are shown once: close the screen and they cannot be seen again.
A recovery code goes where the app’s code goes: on the sign-in screen, after the password, choose “No access to the app? Use a recovery code”. Type it however is easiest — in small letters, without the dashes. Once in, turn two-factor off and set it up again on the phone you have now: a recovery code turns it off as well.
Keep them apart from the phone: on paper or in a password manager. A screenshot on the same phone is no help when the phone is lost.
If you did not finish the set-up
Closed the screen with the QR code without entering a code? No harm done. Choose “Set up” again and the app gives a new code. The earlier QR code no longer works; if you had scanned it, remove the old Nexora entry from your authenticator.
Common mistakes
- The code is not accepted — check the time on your phone: the codes depend on an exact clock. Turn on automatic time.
- Changing phones — move your authenticator entries across before you reset the old one.
- Tell no one the app’s code or your recovery codes. We never ask for them.
Trading cryptocurrency carries a high risk and may result in the partial or total loss of funds. Nothing on this site is investment advice. Nexora is software, not a broker or an asset manager.