Security and password
Change your password and turn on two-step verification from Preferences, on any plan. What the password policy requires and what happens to your other sessions.
Your password and your two-step verification are managed in the same place: your avatar menu, top right, Preferences.
Changing your password
- Open your avatar menu and select Preferences.
- On the Password card, enter your Current password.
- Enter the New password and repeat it in Confirm new password.
- Select Change password.
When you change it, you’re signed out on all your devices, but not instantly. Each open session keeps working until its access expires, which takes an hour at most; at that point Orquiva tries to renew it, can’t, and asks you to sign in again with the new password. That happens on your phone, on your other computer and also on the device you changed it from.
If you don’t remember your current password, sign out of Orquiva and use Forgot your password? on the sign-in screen: you’ll get an email with a link to create a new one. It’s covered step by step in Signing in.
What the password needs
Your company sets the requirements. If it hasn’t changed anything, they are:
- Between 8 and 128 characters.
- At least one uppercase letter, one lowercase letter and one number.
- No symbol required, unless your company asks for one.
If the new one doesn’t qualify, Orquiva won’t accept it and tells you what’s missing. Passwords don’t expire: you won’t have to renew yours every so often.
Two-step verification
Two-step verification asks, on top of your password, for a 6-digit code from an authenticator app (Google Authenticator, 1Password, Authy…) every time you sign in. That way, even if someone knows your password, they can’t get in without your phone.
You turn it on yourself, on any plan:
- In Preferences, Two-step verification card, select Turn on.
- Scan the QR code with your authenticator app. If you can’t, type the key shown below it into the app.
- Enter the 6-digit code the app shows.
- Select Confirm and turn on.
From then on, every time you sign in you’ll be asked for the code.
To remove it, select Turn off and enter your current password. If your company requires it for everyone (an Enterprise plan option), or an administrator turned it on for you, there’s no Turn off: you’ll see a notice that it can’t be turned off.
Without the app you can't get in
Orquiva doesn’t provide recovery codes. If you change phones, move your accounts to the app on the new phone first. If you lose your phone, ask whoever administers Orquiva at your company to turn off your verification; if they can’t, contact Orquiva support.
Signing out
In your avatar menu, select Sign out. It ends the session on that device.
If you’ve left a session open somewhere else or suspect someone has gotten into your account, change your password: those sessions end on their own within an hour at most, when their access expires. There’s no button to cut them off right away.
If something goes wrong
I changed my password and the other computer is still signed in. That computer’s session lasts until its access expires, an hour at most after it was last renewed. After that it will ask for the new password.
Shortly after changing my password, Orquiva asks me to sign in again. The change also ends the session on the device you made it from, as soon as its access expires. Sign in with the new password.
It won’t accept my new password. It doesn’t meet your company’s requirements. Make it longer and check it has an uppercase letter, a lowercase letter and a number; if it still fails, your company also requires a symbol.
It says my current password is wrong. Check caps lock and your keyboard language. If you really don’t remember it, use Forgot your password?.
The code from the app doesn’t work. Make sure your phone’s time is set automatically: the codes depend on the time. And that you’re using the right Orquiva account in the app.
I can’t turn off two-step verification. Your company requires it for everyone, or an administrator turned it on for you. Either way, only the administration can remove it.
I lost the phone with my authenticator app. Ask whoever administers Orquiva at your company to turn off your verification. If they can’t, contact us.
What the other side sees
The same feature, from the other side:
Related articles
- Signing inActivating your account from the invitation, signing in with a password or your work account, two-step verification, and what to do if you forget your password.
- Your data privacyWhat Orquiva stores about you, who sees it (coworkers, manager, HR), what you can correct yourself, and why your company is responsible for your data.
Still stuck?
Tell us what happened and we'll help.