How do I secure my WhatsAble sign-in with two-step verification?
Every WhatsAble user can turn on two-step verification with an authenticator app and recovery codes, verify their email address, and change their password. Passwords need at least 8 characters, and repeated wrong guesses are slowed down.
The Account security page holds the settings that belong to you as a person, not to an organization: the email you sign in with, your password, and two-step verification. Every user has one, whatever their role, including Members and people who belong to several organizations.
To open it, select your name at the bottom of the sidebar, then Account security.
Everything on this page is optional. Nobody in your team is required to verify their email or turn on two-step verification, and you cannot require it for them.
Two-step verification
With two-step verification on, signing in asks for your password and then for a 6-digit code from an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password. Someone who learns your password still cannot sign in without your phone.
Turn it on
Start
On Account security, under Two-step verification, select Turn on. Enter Your password and select Continue.
Scan the QR code
Open your authenticator app and scan the code. If you cannot scan it, select Copy setup key and enter the key in your app instead. Select Next.
Save your recovery codes
The page shows 10 recovery codes. Select Copy codes and keep them somewhere safe, such as a password manager. You will not see them again. Tick I saved my recovery codes and select Next.
Confirm a code
Type the 6-digit code your app shows now and select Verify and finish. The section then shows On.
You need a password to turn on two-step verification. If your account was moved from the classic Notifyer app and you have never set a password here, sign out and use Forgot password? on the sign-in page first.
Sign in with a code
After your email and password, the sign-in page shows Two-step verification. Enter the Authentication code from your app and select Verify. The code changes every 30 seconds.
The same step appears when you accept an invitation with an existing account, and when you connect an AI app such as Claude to WhatsAble.
Lost your phone? Use a recovery code
On the code step, select Use a recovery code, enter one of the codes you saved, and select Verify. Each recovery code works once.
When you are signed in again, open Account security and either select Get new recovery codes (the old ones stop working), or turn two-step verification off and on again with your new phone.
If you have lost both your phone and your recovery codes, contact WhatsAble support. Once support has confirmed it is you, they turn two-step verification off for your account. You then sign in with your password only, and you are signed out on every device. Turn two-step verification on again from Account security with your new phone.
Turn it off
Select Turn off, enter your password, and select Turn it off. Signing in then asks for your password only.
What two-step verification does not cover
It protects signing in to WhatsAble. An API key keeps working without a code, and so does an AI app that is already connected. Connecting a new AI app asks for the code, because it signs you in.
Verify your email address
Verifying is optional. It confirms that your sign-in address reaches you, which matters for password resets.
When you create an account, WhatsAble sends a verification link. To send another, open Account security and select Send verification email. The link works for 24 hours. When you open it, the page says Email verified, and Account security shows Verified.
Change your password
Under Password, enter your Current password and a New password, then select Change password.
- A new password needs at least 8 characters.
- Sign out of other devices is ticked by default. Anywhere else you are signed in will ask for the new password.
If your current password is shorter than 8 characters, it keeps working. You only need 8 characters when you choose a new one.
Too many attempts
WhatsAble slows down repeated guesses:
- Too many sign-in attempts from one network in a minute show Too many attempts. Try again in a minute.
- 10 wrong passwords for one email address within 15 minutes pause sign-in for that address for the rest of the 15 minutes, from any network. Resetting your password with Forgot password? sets a new password, but sign-in for that address stays paused until the 15 minutes end. Then sign in with the new password.
- Too many wrong two-step codes lock the code step for a while. Wait, then try again, or use a recovery code later.
Related
How do team roles and access work in Whatsable?
Invite teammates to Whatsable as Owner, Admin or Member, and limit a Member to some WhatsApp numbers or to conversations with some labels. Teams are part of Pro and Agency; Bulk Message has one user.
How do notifications work in Whatsable?
The Whatsable notification bell: AI handoffs, new teammates, number and account status from Meta, template reviews, contact usage, webhook failures and failed payments. Choose what your team hears about, and get alerts on your device.