Two-step Verification (MFA) Setup & Usage Guide
Revenuealot requires two-step verification (MFA) to help protect your account and connected store data.
Core Concept: Verification codes are generated by an authenticator app on your phone
Revenuealot uses standard TOTP (time-based one-time password). When prompted for a 6-digit code, open the authenticator app on your phone. You will not receive codes by email or SMS.
1. Choose an Authenticator App
We recommend Microsoft Authenticator or Google Authenticator. Any compatible app supporting standard TOTP (such as 1Password, Bitwarden, Authy, etc.) works properly; if you already use one, keep using it.
| Recommended App | iPhone (iOS) | Android | Notes |
|---|---|---|---|
| Microsoft Authenticator (Recommended) | App Store | Official download instructions | Recommended across both iOS and Android; widely available in standard app stores |
| Google Authenticator | App Store | Google Play | Requires Google Play services on Android |
Tip: When searching in app stores, verify the official publisher (Microsoft Corporation or Google LLC).
2. First-time Setup Steps
Keep the Revenuealot setup page open in your browser, and follow these steps:
Keep the setup screen open
When prompted during sign-in, keep the computer screen showing the setup QR code and secret key.
Add Revenuealot in your authenticator app
Open the authenticator app on your phone, and select how to add your account:
- Open Microsoft Authenticator and tap the + button in the top right.
- Choose Other account (⚠️ Do not select “Work or school” or “Personal”).
- Point your camera at the QR code on your computer screen to scan.
Enter the 6-digit code to confirm
Find the newly added Revenuealot entry in your authenticator app. Enter its current 6-digit code on the setup page and continue.
(Note: Codes change every 30 seconds. If the timer is about to expire, wait for the next code before entering.)
Save your backup codes (Crucial)
Once linked, the page displays a set of one-time Backup Codes.
Copy and save these backup codes in a secure location (such as your password manager). If you lose or replace your phone, each code acts as a one-time emergency key to sign in.
Security Notice: Keep your setup QR code, secret keys, dynamic codes, and backup codes confidential. Revenuealot support staff will never ask for your verification or backup codes.
3. Signing in Next Time
Whenever prompted for two-step verification during sign-in:
- Open the authenticator app on your phone;
- Locate the current 6-digit code for Revenuealot;
- Enter it and click Continue.
💡 No repeat scanning required: Once set up, you only need to read the current code. You do not need to scan a new QR code each time you sign in.
4. Troubleshooting & Common Questions
”Code is invalid” or “Code expired”?
This is the most common issue and is typically caused by:
- Phone system time drift (Most common): TOTP codes depend on precise international timestamps. If your phone clock is off by even 30 seconds, codes will fail.
- Fix: On your phone, go to Settings → Date & Time, and turn on Set Automatically (network time sync).
- Wrong account entry: Check that you are reading the code under
Revenuealot, rather than Amazon, Shopify, or another service. - Wait for the next cycle: If the countdown circle is ending, wait 2–3 seconds for the new 6-digit code and submit again.
Installed the app but can’t find Revenuealot?
Installing the authenticator app alone does not link your account. You must tap + in the app and scan the QR code (or enter the secret key) shown on the Revenuealot setup page.
Lost, replaced, or damaged phone?
- Sign in with a backup code: On the verification code entry screen, click Use another method, and enter an unused one-time backup code.
- Contact support for reset assistance: If you have neither your authenticator nor backup codes, email support@revenuealot.com from your registered account email. After verifying your identity and organization ownership, we will help reset your MFA. (Note: Resetting your password alone does not remove MFA).
Multiple team members using the same account?
Two-step verification is tied to individual devices. For account security, each team member should have their own Revenuealot seat with appropriate permissions assigned in Organization Settings. Do not share single credentials or distribute QR code screenshots.