Two-Factor Authentication

Two-factor authentication (2FA) adds a critical second layer of protection to your creavio account. Even if someone obtains your password, they cannot access your account without the second verification step. For photographers handling client data and financial information, 2FA is essential.

How 2FA Works

After entering your password, you'll be prompted for a time-based one-time code generated by an authenticator app on your phone. This code changes every 30 seconds, making it virtually impossible for unauthorized users to gain access.

Enabling 2FA

Go to Settings > Security in your creavio dashboard
Click Enable Two-Factor Authentication
Download an authenticator app if you don't have one — Google Authenticator, Authy, or 1Password all work
Scan the QR code displayed on screen with your authenticator app
Enter the six-digit code from your app to confirm setup
Save your backup recovery codes in a secure location

Recovery Codes

When you enable 2FA, creavio generates ten single-use recovery codes. Store these somewhere safe and separate from your phone — a password manager, a printed sheet in a locked drawer, or an encrypted note. Each code can only be used once. If you lose your phone and your recovery codes, you'll need to contact support to regain access.

Managing 2FA

New device: If you switch phones, disable 2FA before wiping the old device, then re-enable it on the new one
Lost phone: Use a recovery code to sign in, then reconfigure 2FA with your new device
Disabling: Go to Settings > Security > Disable 2FA. You'll need to enter a current code to confirm

Team Accounts

If you have team members on your creavio account, you can require 2FA for all users under Settings > Team > Security Policy. This ensures every person with access to your client data is protected, not just the account owner.