Two-factor authentication

iLive supports optional time-based one-time passwords (TOTP) for admin console and tenant portal sign-in. When MFA is enabled on your account, signing in requires your password and a 6-digit code from an authenticator app on your phone.

MFA is strictly opt-in. If you never enrol, your sign-in experience is unchanged.

Supported authenticator apps

Any standards-compliant TOTP app will work, including:

Google Authenticator
Authy
1Password
Bitwarden
Microsoft Authenticator

Enrolling from the portal or admin console

Sign in and open your Profile page.
In the Two-factor authentication section click Set up.
Scan the QR code with your authenticator app, or copy the secret manually if you can't scan.
Enter the 6-digit code your app displays, then click Confirm and enable.
You will be shown 8 recovery codes. Copy them to a safe place (password manager, printed and locked away, etc.) — they will not be shown again.

Once enabled, every subsequent sign-in will prompt for a 6-digit code after your password.

Lost-device recovery

Recovery codes exist for the situation where you lose access to your authenticator. On the sign-in screen:

Enter your email and password as normal.
On the code entry step, click Having trouble? Use a recovery code.
Enter one of your saved recovery codes.

Each recovery code can be used only once. If you're running low, regenerate a fresh set of 8 from your profile — the old codes stop working immediately.

Disabling

You can turn MFA off at any time from your profile. You'll be asked for your password to confirm. Disabling destroys your TOTP secret and all remaining recovery codes.

Notes

Password reset does not change your MFA status. If you reset your password, MFA stays on.
The TOTP secret is shown only during enrolment. If you cancel before confirming, nothing is stored — you can start fresh.
Recovery codes are stored on the server as bcrypt hashes, the same way your password is stored.