Use an Authentication App

For multi-factor authentication, you can get a verification code (also known as a “time-based one-time passcode”, abbreviated as “TOTP”) from an authentication app from your phone.

Authentication app works offline — No mobile data or cell reception required!

To set up your authentication app with Sunergo Accounts:

1. Go to Account Settings > Security in Sunergo Accounts: accounts.sunergo.net/account/security.
   1. You can also access Accounts Settings by selecting your profile name or “My Account” in the top right corner, then select Security.
2. Select Setup in the “Use an Authentication App” card.

Follow the on-screen instructions to setup your authentication app with your phone or other device.

Which authentication app should I use? #

Sunergo Accounts currently recommends using a third-party authentication app such as Google Authenticator or Microsoft Authenticator. Some password managers, such as 1Password, also include integrated support for TOTP.

Aside from the email address for your account, no data is shared between the authentication app and Sunergo Accounts.

How do verification codes from an authentication app work? #

During setup, Sunergo Accounts generates a key that is provided to your authentication app through the QR code or setup key.

Keep this setup key and QR code private! Don’t share it with anyone else.

Sunergo Accounts and your authentication app will use this key and the current time to generate a code. These codes automatically expire after a short period of time, so you don’t need to remember them.

When you log in and enter the code that is generated from your authentication app, Sunergo Accounts will check that the code matches the code generated from the key for your account.

Are the codes generated from the authentication app secure? #

Codes expire after a short period of time, so if someone finds your code, there is very little chance of them using the code again to log in to your account.

Someone would also need the key generated during setup to generate the code. We only show your key once during setup, and we generate new keys if you need to setup a new device.