ANTE User ManualTwo-Step Verification
Two-step verification adds a second step to signing in, so a stolen or guessed password is not enough to get into ANTE. After you type your password, ANTE also asks for a 6-digit code from an authenticator app on your phone (or, if your company allows it, a code sent to your email). The code changes every 30 seconds, and it works without mobile signal or email.
Overview
Your company decides how this works. There are three settings:
- Never — your password alone signs you in.
- On a new device or network — you are asked for a code only when you sign in from a device or network you have not used before.
- On every sign-in — you are asked for a code each time, except when you are in your company's trusted office network.
If you sign in from your company's trusted office network, ANTE does not ask for the code. The same code is asked as soon as you sign in from anywhere else, such as home.
Setting It Up on Your Phone
You set this up once. Your company may require it: in that case ANTE shows the setup screen right after you type your password, and you cannot continue until it is done.
- Install an authenticator app
Install any authenticator app on your phone: Google Authenticator, Microsoft Authenticator, Authy or 1Password all work.
- Scan the QR code
In the app, add a new account and scan the QR code on the screen. If you are signing in on the same phone, tap Open authenticator app instead, or type the key shown under the QR code.
- Enter the 6-digit code
Type the 6-digit code that the app now shows for ANTE and press Verify and continue. A code that is not correct is refused; try the next code the app shows.
- Save your recovery codes
ANTE shows 10 recovery codes. Each one lets you sign in once if you lose your phone. Use Copy codes or Download and keep them somewhere safe. They are shown only this one time.
If you want to set it up before your company requires it, open My Profile → Security and use Two-step verification → Set up authenticator.
Signing In
- Type your company, username and password as usual
- Enter the code
ANTE asks for the 6-digit code from your authenticator app. Type it and press Verify. Each code works once; wait for the next code if you used it a moment ago.
On the code screen you can also choose another way:
- Email me a code instead — sends a 6-digit code to your email address (only if your company allows email codes and your account has an email address).
- Use a recovery code — type one of your saved recovery codes. Each recovery code works only once.
After several wrong codes the sign-in is stopped and your account is locked for a short time. Wait a few minutes, then sign in again.
If You Lose Your Phone
- Sign in with one of your recovery codes (Use a recovery code).
- Open My Profile → Security. Choose Remove authenticator (you will need your password and a recovery code), then set up the authenticator again on your new phone.
If you have no recovery codes left either, ask your HR or IT administrator to reset your authenticator. You will set it up again the next time you sign in.
Managing Your Authenticator
In My Profile → Security → Two-step verification you can see whether the authenticator is on and how many recovery codes are left, get a new set of recovery codes (the old ones stop working), or remove the authenticator. Removing it or getting new codes asks for your password and a current code, so nobody else can do it from a session you left open.
For Administrators
Go to Settings → Company Information → Login Security → Two-step verification.
- When to ask for the second step — Never, On a new device or network, or On every sign-in. Companies that never changed this keep the new-device behaviour they had before.
- Authenticator app / Emailed code — which methods your people may use. At least one must stay on. The emailed code is the fallback when someone cannot use the app.
- Require everyone to set up the authenticator app — users without one must set it up at their next sign-in. Use Grace period (days) to let them keep signing in for a while before it becomes mandatory; the My Profile page shows them the deadline.
- Trusted office networks — the public IP addresses (or ranges such as
203.0.113.0/24) of your offices. A sign-in from one of them skips the second step. Press Add my current IP while you are in the office to add the address ANTE currently sees for you. Ranges wider than a /8 (IPv4) or /32 (IPv6) are refused.
For staff who have no email address on their account, the first authenticator can only be set up with the password alone, because there is no mailbox to check first. This was accepted by Guillermo (Multibook) on 2 November 2026 because production staff do not have company email. If someone else knows such a person's password before they set up their authenticator, they could register their own phone. Reduce this by having those people set it up right away, and use Reset authenticator if anything looks wrong.
Allow Google / Slack / Facebook sign-in (on by default) decides whether people can sign in or link their account with those services. Switch it off to allow password sign-in only; it is recommended off together with On every sign-in, because signing in with Google, Slack or Facebook does not ask for the authenticator code. When it is off the sign-in buttons disappear and linking is refused in My Profile.
Staff without a company email, or who share PCs, are well served by On every sign-in with Require everyone to set up the authenticator app: each person gets their own code on their own phone, and no mailbox is needed.
A trusted network skips the second step for everyone using it. Add only addresses your company controls, and review the list when your office internet provider changes.
To help a user who lost their phone and recovery codes, open the user in Settings → Users, then Actions → Reset authenticator. You can reset people ranked below you, never yourself. Every setup, sign-in code check, reset and recovery-code use is recorded in the audit log.
Related password rules (for example forcing a new password every 60 days) are set in the same Login Security card under Password expiry (days).
How It Connects
Set up first
- Company Information — the Login Security card holds these settings, next to the password rules.
Gets its data from
- My Profile — where each person sets up, replaces or removes their own authenticator.
Feeds into
- Audit Log — records every setup, code check, reset and recovery-code use.