Enabling two-factor authentication (2FA) on your account.

Account passwords leak. 2FA means a leaked password isn't enough to sign in. Set it up today.

Setup

New panel (rivervo.com/panel):

1. User menu (your avatar, top right) → Account settings
2. Security → Two-factor authentication → Turn on

A QR code appears.

Scan with your authenticator app

Open any app that supports standard 6-digit (TOTP) codes, for example:

• Google Authenticator
• Microsoft Authenticator
• 1Password, Bitwarden or another password manager with TOTP support

Scan the QR code. Can't scan? Enter the key shown under the code into the app manually. The app then shows a 6-digit code that changes every 30 seconds.

Verify

Enter the current 6-digit code in the panel and click Turn on. Do it within 10 minutes of opening the setup window — after that, start again.

From now on, every sign-in needs your password and a fresh code from the app — also when you sign in with Google or Telegram.

There are no backup codes

Rivervo doesn't issue backup or recovery codes. Your authenticator app is the only way to produce codes, so protect it:

• Use an app that syncs or backs up — a password manager (1Password, Bitwarden) or an authenticator with cloud backup. If your phone breaks, the codes are still on your other devices.
• Or save the setup key (the one shown under the QR code) somewhere safe, like your password manager. You can add it to a new app later and get the same codes.

Sign-in flow with 2FA on

1. Enter your email and password (or continue with Google / Telegram)
2. The panel asks for the Authenticator code
3. Open the app → type the current code → Verify

After 5 wrong codes in a row you're sent back to the sign-in page to start over.

Lost your phone

1. If you saved the setup key or your codes sync to another device: add the key to a new authenticator app, or use the other device. Same codes work.
2. Otherwise: write to support from a signed-out state via the contact page. After we've confirmed your identity, our staff can turn 2FA off for your account. Then sign in and turn it on again with your new phone.

Turning 2FA off

New panel: Account settings → Security → Two-factor authentication → Turn off, then enter a current 6-digit code from the app.

What 2FA doesn't protect

• Your email account. If someone controls your email, they can reset your Rivervo password. 2FA still asks for the code, but protect your email with 2FA too.
• Malware on your own computer. If malware steals a browser session that's already signed in, the 2FA step has already been passed. Keep your devices clean, and use Sign Out on shared computers.

Codes from an authenticator app don't depend on your phone number, so they're not affected by SIM-swap attacks.