Every PROVA account uses two-factor authentication. After your password, you enter a six-digit code from an authenticator app on your phone.
Step 1: Install an authenticator app
Any standard app works: Google Authenticator, Microsoft Authenticator, Authy, or the one built into your password manager.
Step 2: Scan the QR code
On first login PROVA shows a QR code. In your authenticator app choose "Add account" and scan it. A new entry called "PROVA Risk" appears with a code that changes every 30 seconds.
Step 3: Enter the code
Type the current six-digit code into PROVA and continue.
Step 4: Confirm by email
We send a one-time code to your email address as a backup method. Enter it to finish setup.
Step 5: Save your backup codes
You'll be shown ten backup codes. Save them somewhere safe. Each one logs you in once if your phone is unavailable.
"Invalid code" during setup
The most common cause is an old "PROVA Risk" entry in your authenticator app from an earlier attempt. PROVA issues a new pairing key every time the setup page loads, so codes from the old entry will never work. Delete the old entry, click "Back to QR code", scan again, and enter the fresh code.
"Too many incorrect codes"
After a few wrong codes PROVA pauses for a short time. Wait for the countdown, then enter the current code from your app.
Using the email code instead
On any login you can choose "Use email code instead" to receive a code by email rather than the app. Codes expire after 10 minutes. If yours has expired, click "Resend email code" for a new one.