Two-Factor Authentication
In this article
Overview
Two-factor authentication (2FA) adds an extra layer of security to your account. When it's turned on, logging in takes two things instead of one: your password, and a short numeric code that only you can get hold of. That way, even if someone learns your password, they still can't get into your account.
MyHallWizard gives you two ways to receive that code:
An authenticator app on your phone (such as Google Authenticator) — the most secure option.
Email — a code is sent to your email address each time you log in. This is the easiest option if you'd rather not install an app.
You only use one method at a time, and you can switch between them whenever you like.
Choosing how you receive your codes
Both methods keep your account safe. The right one for you depends on how you'd prefer to receive your code:
Authenticator app (more secure). A free app on your phone generates a new 6-digit code every 30 seconds. The codes are created on your phone itself, so they work even without a signal and never travel over email.
Email (easier to use). We email you a fresh 6-digit code whenever you need one. There's nothing to install — just open your inbox.
If you're not sure, email is the simplest place to start, and you can move to an authenticator app later.
Setting up two-factor authentication
You set up 2FA from the Security page: open the Settings menu and choose Security.
In the Two Factor Authentication section you'll be asked to choose a method. For your security, you may be prompted to re-enter your password along the way — this is normal.
Using an authenticator app
Select Authenticator app, then click Set up authenticator app.
If you don't already have an authenticator app, install one on your phone. We recommend the free Google Authenticator app — links to the App Store (iPhone) and Google Play (Android) are shown on the page.
Open the app and add a new account by scanning the QR code shown on screen. If you can't scan it, type in the setup key shown beneath the code instead.
Your app will now show a 6-digit code that changes every 30 seconds. Enter the current code in the Code box.
Click Confirm. That's it — two-factor authentication is now switched on.
Using email
Select Email, then click Set up email.
We'll send a 6-digit code to your account's email address. Open your inbox and find the message from MyHallWizard.
Enter the code in the Code box and click Confirm.
If the code doesn't arrive after a minute or two, click Resend code and check your spam or junk folder. Email codes expire after 10 minutes, so if too much time passes, just request a new one.
Logging in with two-factor authentication
Once 2FA is set up, logging in has one extra step. After you enter your email address and password as usual, you'll be asked for your code.
With an authenticator app
Open your authenticator app, read the current 6-digit code for MyHallWizard, and type it in. Remember the code changes every 30 seconds — if it's about to expire, wait for the next one so you have time to type it.
With email
We'll email you a code automatically. Open your inbox, enter the code, and continue. If it hasn't arrived, click Resend code. As during setup, email codes expire after 10 minutes.
There's a Get help link on the login screen if you get stuck.
Do I have to use two-factor authentication?
That depends on your account:
Voluntary. For most people 2FA is optional but strongly recommended. You can turn it on (and off again) whenever you like from the Security page.
Mandatory. In some cases 2FA is required — for example, if your venue's administrator has made it compulsory for everyone at the venue. If 2FA is required for you and you haven't set it up yet, the next time you log in you'll be guided straight to a setup page and asked to finish before you can carry on using MyHallWizard. You can still choose either method (authenticator app or email), but you won't be able to turn 2FA off.
Changing your method or turning it off
You can change how you receive your codes at any time from the Security page.
Switching methods. Choose the other method (for example, move from email to an authenticator app) and set it up as described above. Your existing method keeps working until you've confirmed the new one, so you won't lock yourself out.
Turning it off. Select No two-factor authentication and confirm. If 2FA is required for your account, this option won't be available — you can still switch methods, but you can't turn it off.
Requiring two-factor authentication for your venue
If you're a venue administrator, you can require every user at your venue to use two-factor authentication.
Open the Settings menu and choose Users.
In the Security section, switch on Require two-factor authentication for all users.
You'll be asked to confirm. If you haven't set up your own 2FA yet, you'll be taken to set it up straight away — the requirement applies to you as well.
From then on, every user at your venue must set up 2FA the next time they log in before they can continue. Each person can choose whichever method suits them. To lift the requirement, switch the same setting off again.
Troubleshooting
My emailed code didn't arrive. Wait a minute, then click Resend code. Check your spam or junk folder, and make sure your account's email address is correct. Codes expire after 10 minutes, so request a fresh one if it's been longer.
My code was rejected or has expired. Email codes can only be used once and expire after 10 minutes — request a new one and enter it promptly. Authenticator codes change every 30 seconds, so make sure you're entering the current one.
My authenticator app code is never accepted. Authenticator apps rely on your phone's clock being accurate. On your phone, turn on the automatic (network) date and time setting, then try again with a fresh code.
I've lost my phone or can't open my authenticator app. For security, there's no self-service way to bypass this. Please contact our support team — once we've confirmed your identity, we can reset two-factor authentication on your account so you can set it up again.
I keep being asked for my password when changing 2FA settings. This is a deliberate safety check when you change security settings. Enter your password to continue; you won't be asked again for a short while.
Getting more help
If you're still stuck, we're happy to help — head to our support page and get in touch.