build 2.4.5 · aes-256-gcm / ml-kem-768 · eu/de · ram only

Set up your authenticator app.

About 3 minutes. One-time setup. Works with 1Password, Bitwarden, Authy, Google Authenticator, and any RFC 6238 compatible app.

1

Install an authenticator app

Pick one — all are free:

  • 1Passwordrecommended — syncs across devices, family and team plans available
  • Bitwarden — free, open source, works on all platforms
  • Authy — cloud backup, multi-device
  • Google Authenticator — simple, single device
  • Microsoft Authenticator — good if already using Microsoft 365

Install on your phone before continuing.

2

Open your Paramant setup link

You received a setup link in your welcome email. It looks like:

https://paramant.app/auth/setup?token=XXXXXXXX

Click it on your computer. The link expires 14 days after issue.

If your link has expired, request a new one at paramant.app/auth/resend-setup.

3

Scan the QR code

Open your authenticator app on your phone and add a new entry:

  • 1Password — tap + → "Scan QR Code"
  • Bitwarden — Add item → Login → Authenticator key → Scan QR
  • Authy — tap + → "Scan QR Code"
  • Google Authenticator — tap + → "Scan a QR code"

Point the camera at the QR code on paramant.app. The app shows a 6-digit code that changes every 30 seconds.

4

Confirm it works

Type the current 6-digit code from your app into the paramant.app setup page. Click Confirm setup.

If it says "Invalid code", check that your phone's time is set automatically (Settings → General → Date & Time → Set Automatically). TOTP depends on accurate time.

5

Save your backup codes

After confirming, you'll see 10 backup codes. Each can be used once if you lose access to your authenticator app.

Save them in at least one of these places:

  • In your password managerrecommended — 1Password, Bitwarden, etc. as a secure note
  • Printed copy — print and keep in a locked drawer or safe
  • Encrypted file — password-protected ZIP or encrypted note

Don't store backup codes in plain text files, email, unencrypted cloud notes (iCloud Notes, Google Keep), or phone camera roll.


You're done

From now on, sign in at paramant.app/auth/login with your email and the current 6-digit code from your app. Sessions last 1 hour.


Troubleshooting

"Invalid code" when I know it's correct

Phone time drift is the most common cause. Enable automatic time on your phone (Settings → General → Date & Time → Set Automatically).

Also possible: the code was already used in the last 90 seconds. Wait 30 seconds for a fresh code and try again.

"Setup link expired"

Request a new link at paramant.app/auth/resend-setup.

"All backup codes used"

Contact privacy@paramant.app with your account details. We'll verify your identity and manually reset your authenticator setup.

I lost my phone / authenticator app

Use one of your backup codes to sign in, then re-enroll a new authenticator app from your account settings. If you've used all backup codes, contact privacy@paramant.app.


Related

Backup codes

What they are, when to use them, how to regenerate.

API key or TOTP?

When to use which authentication method.