Set up two-factor authentication with an authenticator app
This takes about 3 minutes and you only do it once. Every standard authenticator app works, including Google Authenticator and Microsoft Authenticator. For the strongest setup we recommend an app that supports SHA-256: Raivo (iOS), Aegis (Android), 1Password, Bitwarden, Authy, Ente Auth, or 2FAS.
Install an authenticator app
Pick one. All are free:
- Raivorecommended iOS: open source, iCloud backup, single-device
- Aegisrecommended Android: open source, encrypted local backup
- 1Password: syncs across devices, family and team plans available
- Bitwarden: free, open source, works on all platforms
- Authy: cloud backup, multi-device
- Ente Auth: open source, end-to-end encrypted cloud backup
- 2FAS: iOS and Android, with a companion browser extension
Install it on your phone before you continue.
Open your Paramant setup link
Your welcome email contains a setup link. It looks like this:
Open it on your computer. The link works for two days after it was sent. On the first page you choose how you sign in from now on: with a passkey on this device (Set up a passkey), or with an authenticator app (Set up an app instead). This guide follows the authenticator app.
Did your link expire before you linked an app? Mail privacy@paramant.app from your account address and we send a new one.
Scan the QR code
Open your authenticator app on your phone and add a new entry:
- Raivo (iOS): tap + → "Scan QR Code"
- Aegis (Android): tap + → "Scan a QR code"
- 1Password: tap + → "Scan QR Code"
- Bitwarden: Add item → Login → Authenticator key → Scan QR
- Authy: tap + → "Scan QR Code"
Point the camera at the QR code on paramant.app. The app shows a 6-digit code that changes every 30 seconds.
Confirm it works
Type the current 6-digit code from your app into the paramant.app setup page and click Confirm and activate account.
If it says "Invalid code", check that your phone's time is set automatically (Settings → General → Date & Time → Set Automatically). The codes depend on the correct time.
Save your backup codes
You now see 10 backup codes. Each one works once, for when you cannot use your authenticator app.
Save them in at least one of these places:
- In your password managerrecommended: as a secure note in 1Password, Bitwarden or similar
- Printed copy: kept in a locked drawer or safe
- Encrypted file: password-protected ZIP or encrypted note
Don't store backup codes in plain text files, email, unencrypted cloud notes (iCloud Notes, Google Keep) or your phone's camera roll.
You're done
From now on, sign in at paramant.app/auth/login with your email and the current 6-digit code from your app. A session ends after an hour without activity, and always after twelve hours.
Troubleshooting
The most common cause is a phone clock that is slightly off. Enable automatic time on your phone (Settings → General → Date & Time → Set Automatically).
Also possible: the code was already used in the last 90 seconds. Wait 30 seconds for a fresh code and try again.
A setup link works for two days. Mail privacy@paramant.app from your account address and we send a new one. If you had already linked the app and lost it, see Lost authenticator.
Contact privacy@paramant.app with your account details. We'll verify your identity and manually reset your authenticator setup.
Use one of your backup codes to sign in, then set up a new authenticator app from your account settings. If you've used all backup codes, contact privacy@paramant.app.