Multi-factor authentication

Setup and verification

Open Settings → Sign-in and multi-factor authentication and begin authenticator setup. Scan the QR code or enter the displayed setup key in your authenticator, then enter its 6-digit code to enable MFA. Pending setup expires after 15 minutes.

After following an email sign-in link, enter the current code when prompted. Used codes cannot be reused. Check your device clock if codes are rejected.

Recovery codes and changing devices

Setup displays 10 recovery codes. Store them securely, separately from your device. Each can be used once. Regenerating codes invalidates the previous set.

When changing devices, sign in with the current authenticator or an unused recovery code, disable authenticator setup, and enroll the new device. Store the new recovery codes.

If both your device and recovery codes are lost, contact support. An operator can reset MFA after verifying your identity; existing sessions are also ended.

Contact: support（at）elf.ne.jp (if no link appears, replace （at） with @).

Lockout

5 failed attempts within the 10-minute counting window lock verification for 10 minutes. Wait for the lock to expire, then enter a current code. Recovery codes cannot bypass the lock.

Organization MFA requirements

An OWNER who meets the requirement can require organization MFA. Members without a qualifying method must complete setup before accessing that organization’s data. A registered passkey or signing in through that organization’s SSO also meets its requirement.