Two-step verification (2FA) adds a second step to protect your sign-in. Your recordings stay protected even if your password leaks.
Applies to: v4.0.x or later. Still using v3.30.x or earlier Plaud Mobile App? See Two-step verification sign-in.
What is two-step verification in Plaud?
Plaud supports three verification credentials:
- Authenticator app (TOTP): the primary method. A 6-digit code from an authenticator app, refreshed every 30 seconds. Available to all accounts, including Google and Apple sign-in. See Set up an authenticator app for two-step verification.
- Email OTP: a code sent to your registered email. Available only to email and password accounts, and acts as a backup once an authenticator app is added.
- Backup codes: single-use codes for when you can't use your other methods. See Backup codes: your two-step verification backup.
Two-step verification is optional. You can turn it on or off at any time in Settings > Account & security > Security > Two-step verification.
How sign-in works with two-step verification on
Once any verification method is on, every sign-in requires it:
- Email and password with Email OTP: enter your password, then the email code.
- Email and password with an authenticator app: enter your password, then the 6-digit code. You can switch to Email OTP as a backup if it's enabled.
- Google or Apple sign-in with an authenticator app: complete the Google or Apple step, then enter the 6-digit code.
After your password step, you have 10 minutes to complete the verification step before the sign-in restarts.
Sensitive actions ask you to verify again
With two-step verification on, Plaud asks you to re-verify before sensitive actions: changing your password, adding or removing a sign-in method, deleting your account, signing out another device, regenerating backup codes, and changing or turning off two-step verification itself.
FAQ about two-step verification
Do I have to use two-step verification?
No. It's optional, and you can turn off all methods.
I signed in with an email code or sign-in link and wasn't asked to verify. Is that a bug?
No. Signing in with an email code or a sign-in link already proves you own the email address, so an Email OTP step would repeat the same check and is skipped. Only an authenticator app code is requested on top of these sign-in types, if you have one enabled.
I enabled an authenticator app, and my old Mobile App version can't sign in.
Older Mobile App versions don't support authenticator sign-in. You'll see an "Update required to sign in" prompt. Update the Plaud Mobile App to the version it shows, then sign in again.
Disclaimer: The information in this article is for reference only and may change as Plaud product features continue to update. Please refer to the latest version of the product for the most current experience.