Multi-factor authentication (MFA) adds a second verification step when you sign in, making your account harder to compromise. Sinch ID supports three MFA methods:
| SMS | Sends a one-time code to your phone number. |
| Authenticator app | Generates a time-based code in an app like Google Authenticator. |
| Security key | Uses a hardware key or built-in platform authenticator (FIDO2). |
Each method is independent, but you can you can enroll (enable) one, two, or all three of the methods. For example, use SMS as your primary method and a security key as a backup.
When you sign in, Sinch ID will prompt you with one of your enrolled MFA methods. If that method is unavailable — for example, you do not have your phone — you can select the Try another method option to switch to one of your other enable MFA methods. If you do not have any other enrolled methods available, you can use your recovery code instead.
The first time you enroll any MFA method, Sinch ID shows a recovery code. This is a one-time backup you can use to sign in if you lose access to all of your MFA methods. Save it somewhere safe.
If you later remove all MFA methods and re-enrol, you will receive a new recovery code.