Skip to main content
Two-step verification (also called MFA) asks for a 6-digit code after your password, so a stolen password is not enough to get into your account. You can use one method or both:
  • Email verification — a code sent to the email address of your account.
  • Authenticator app — a code from Google Authenticator, 1Password or any compatible app, with single-use backup codes in case you lose it.
When either method is on, Pria asks for a code when you sign in from a new browser or network — with a password or with Google, Microsoft, GitHub, Facebook or Apple.
Who should turn this on? Everyone with an admin account: admin accounts can manage users, data and billing. Standard users can turn it on too.

​
How long a verified browser is trusted

After you enter a code, Pria remembers that browser so you are not asked again every time: You are asked again after that time, on another network, in another browser, or after you clear your cookies. Signing out and back in on the same browser keeps the trust.

​
Turning it on

Open Your Profile from the avatar in the top-right and go to Security (Studio UI: Settings › Security & Privacy). The Two-step verification section lists both methods — turning on either one protects your account.

​
Email verification

Switch on Email verification (Studio UI: Enable two-step verification). From your next sign-in on a new browser, Pria emails you a code.

​
Authenticator app

1

Click Set up authenticator app

Pria shows a QR code, plus a setup key in case you can’t scan.
2

Scan the QR code

Add the account to your authenticator app.
3

Enter the 6-digit code from your app

Type the current code and click Verify & turn on. The app is only turned on once a code has worked, so a half-finished setup can’t lock you out.
4

Save your backup codes

Pria shows your single-use backup codes once. Copy or download them and keep them somewhere safe — they get you in if you lose your phone. Regenerate backup codes gives you a new set and cancels the old one.

​
When Pria asks you to turn it on

Admin accounts without two-step verification see Strengthen your account security after signing in: Other accounts that are shown this screen can always choose Remind me in 7 days. Enable MFA turns on email codes; you can add an authenticator app afterwards. Inside Canvas, Pria first shows Confirm it’s you and emails you a code. See More security for Canvas login.

​
Signing in once it is on

1

Sign in as usual

With your password, or with your Google, Microsoft, GitHub, Facebook or Apple button.
2

Enter the code if asked

On a trusted browser you go straight in. Otherwise, enter the 6-digit code. With both methods on, you can switch — Send an email instead, or Use a backup code if you can’t reach your authenticator. The browser is then trusted (see above).
Email codes expire after 5 minutes. After 5 wrong tries the code stops working — click Resend code for a new one (30 seconds between resends). Authenticator codes simply roll over to the next code in your app.

​
Managing your trusted devices

  • Sign out trusted devices (in the Two-step verification section) removes trust from every browser you have verified. The next sign-in anywhere — including this browser — asks for a code. Your current session keeps working.
  • In the Studio UI, Settings › Security & Privacy › Active sessions lists each trusted browser with its network, when it was last used and when its trust expires. Revoke removes one of them.
  • Changing your password also removes trust from every browser.
Do this if you signed in on a shared computer, lost a device, or think your password leaked.

​
Turning it off

Each method turns off on its own:
  • Email verification — switch it off.
  • Authenticator app — click Turn off authenticator app and confirm. Your backup codes stop working too.
When you turn off your last method, two-step verification is off: Pria clears your trusted-device list (so old trust can’t skip a future code), records the change, and leaves your current session alone.

​
Recovery

If you’ve lost your second step:
  • Authenticator app lost: use one of your backup codes when asked for a code. If email verification is also on, have a code emailed instead.
  • No way left in (no mailbox, no backup codes): ask your Digital Twin’s administrator. They can turn two-step verification off for your account in Users, which also clears the authenticator so you can set it up again.
  • If you are an administrator: another admin of your Digital Twin can do the same for you. If no other admin is available, contact the Praxis AI team at humans@praxis-ai.com.

​
What gets logged

Every two-step action — turning a method on or off, codes sent and checked, wrong codes, backup-code use, trusted devices added or removed — is written to a security log. It holds only details such as the time, network address and browser, never your password or the codes.