Start here
Sign in and set up two-factor authentication
How signing in works in Spyral, why every sign in asks for a code, and how to set up an authenticator app.
Every sign in needs a second factor
Spyral asks for a second factor every time you sign in. There is no "remember this device" option. This is deliberate for a product holding client financial records, but it does surprise people on their second day.
You have two ways to provide that second factor.
An authenticator app. You scan a QR code once, and your app then generates a six digit code that changes every 30 seconds. This is the faster option and the one to choose.
A code by email. If you have not set up an authenticator app, Spyral emails you a code at each sign in. This works, but it means every sign in waits on an email arriving.
Setting up an authenticator app
- Sign in and go to Settings, then Privacy & Security.
- Choose to enable two-factor authentication.
- Scan the QR code with your authenticator app.
- Enter the six digit code your app shows, to confirm the pairing worked.
From the next sign in onwards, Spyral asks for a code from the app instead of emailing you one.
There are no backup codes. If you lose the phone holding your authenticator app, you cannot recover access on your own. Contact your firm's Spyral administrator or get in touch with us to have two-factor authentication reset on your account.
Signing out everywhere
If you think someone else has access to your account, Settings has an option to sign out of all devices. This invalidates every existing session immediately, including your own, so you will be asked to sign in again.
Changing your password has the same effect.
One account belongs to one firm
A Spyral account belongs to a single firm, permanently. You cannot accept an invitation from a second firm using the same email address, and there is no way to switch between firms from one account.
If you work with two firms that both use Spyral, you need a separate account with a different email address for each.