Two-factor authentication is required by the ROLE: by any role whose Mandatory two-factor authentication box is ticked, Administrator by default in a new company. A person who receives such a role sets it up at their next login.
Enrolment shows a QR code to scan in your authenticator app, then asks for a code to confirm. At this step MAYA also shows your BACKUP CODES: keep them, they are what lets you in if you lose your phone.
A code already used is refused, even if it is still displayed: wait for the next one. This protects against replay, it is not a fault.
The login form accepts a backup code instead of the app code, except for a role that requires a passkey: then only the passkey is accepted.
If your workspace has just been created, login may answer that the workspace is being prepared: its database is being set up and you receive an email as soon as it is ready.
PlansIncluded in every plan.