How to generate one-time passcodes

Users can enable one-time passcode generation on the Available authorization providers page when the Passcode generator setting is not configured as None.

When Token Vault is configured as the Passcode generator setting, click Enable to enable generating one-time passcodes by Token Vault. Your current passcode is displayed as masked. To show your current passcode and till what time it is valid, keep the Show button pressed. Token Vault automatically generates a new passcode in every 30 seconds even if the previous passcode is still valid.

When Authenticator app is configured as the Passcode generator setting, click Set up to set up an authenticator app to generate one-time passcodes and follow the instructions on the appearing Set up an Authenticator app page:

1. Download a two-factor authenticator app like Microsoft Authenticator or Google Authenticator for your mobile device.

2. Scan the displayed QR code or enter the displayed key generated by Token Vault into your authenticator app to register your user account.

3. Once you have scanned the displayed QR code or input the displayed key, your authenticator app will provide you with a unique code. Enter this code in the Code textbox on the Token Vault Set up an Authenticator app page.

4. Click Verify to finish setting up an Authenticator app.

   Token Vault displays that you have set up an authenticator app to generate one-time passcodes.

   If you no longer want to use the Authenticator app with the key displayed earlier on the Set up an Authenticator app page or you want to set up the Authenticator app with a new key, click Reset.

When Authenticator app or Token Vault is configured as the Passcode generator setting, users can select between the Authenticator app or Token Vault to generate one-time passcodes:

• click on the Set up an Authenticator app link to set up an authenticator app to generate one-time passcodes and follow the instructions on the appearing Set up an Authenticator app page as described above, or

• click on the Enable Token Vault link when you want to use Token Vault for generating one-time passcodes.

When your passcodes get blocked, Token Vault displays this information on the Available authorization providers page. You can unblock your passcodes by clicking Unblock if the Allow unblock for end-users setting is configured as Yes.