Every PROVA account uses two-factor authentication. After your password, you enter a six-digit code from an authenticator app on your phone.
Step 1: Install an authenticator app
Any standard app works: Google Authenticator, Microsoft Authenticator, Authy, or the one built into your password manager.
Step 2: Scan the QR code
On first login PROVA shows a QR code. In your authenticator app choose "Add account" and scan it. A new entry called "PROVA Risk" appears with a code that changes every 30 seconds.
Step 3: Enter the code
Type the current six-digit code into PROVA and continue.
Step 4: Confirm by email
We send a one-time code to your email address as a backup method. Enter it to finish setup.
Step 5: Save your backup codes
You'll be shown ten backup codes. Save them somewhere safe. Each one logs you in once if your phone is unavailable.
"Invalid code" during setup
Codes change every 30 seconds, so enter the one showing right now. Any PROVA Risk entry you scanned during this setup will still work, so an earlier scan is not the problem. If it keeps failing, check that your phone updates its time automatically. To start again with a fresh key, use the refresh button on the QR panel; entries you scanned before that stop working, so delete them from your app and scan the new code.
"Too many incorrect codes"
After a few wrong codes PROVA pauses for a short time. Wait for the countdown, then enter the current code from your app.
Using the email code instead
On any login you can choose "Use email code instead" to receive a code by email rather than the app. Codes expire after 10 minutes. If yours has expired, click "Resend email code" for a new one.