The verification code

The /connexion/code page

If you have set up a second factor, a second door opens after the first: a six-digit code, refreshed every thirty seconds by an app on your phone.

The principle fits in two words: first what you know (your password), then what you have (your phone). A stolen password is no longer enough to get in.

Phone left on the bedside table

That case is covered. When you set it up you receive eight backup codes. Each one works once. They are typed into the same field as the six-digit code. Keep them where you keep your important papers, not in an email, not in a chat thread.

What an administrator cannot do

Remove your second factor. Not Camille, not Cybelia Cloud. Someone locked out gets back in through a link sent to their own address, never through a lock taken off on their behalf. It is inconvenient on the day it happens, and it is exactly what makes the lock serious the rest of the time.