Create and delete TOTP devices

Steps

1. Navigate to the Authenticator.
2. Click Add new device.
3. Set up the device using one of two methods:

Upload a QR code

Upload an image of the QR code from your application's MFA setup page. Mailosaur extracts the shared secret from the QR code automatically.

1. Select the Upload QR code option.
2. Upload or drag and drop a PNG or JPG image containing the QR code (maximum 2 MB). For example, a screenshot from your application's MFA setup page.
3. Mailosaur extracts the shared secret and configures the device automatically.
4. Enter a name for the device.
5. Click Create.

If the QR code cannot be read, an error is displayed. Try again with a higher-quality image, or enter the key manually instead.

Enter a key manually

Enter the shared secret (also known as the setup key or secret key) directly. This is useful when you have the shared secret as text rather than a QR code.

1. Select the Enter key manually option.
2. Enter the base32-encoded shared secret provided by your application during MFA setup (for example, JBSWY3DPEHPK3PXP).
3. Enter a name for the device.
4. Click Create.

Once created, the device displays the current 6-digit TOTP code, which refreshes automatically. The device name cannot be changed after creation.

Delete a device

1. Navigate to Authenticator.
2. Find the device you want to remove.
3. Click the ... actions menu.
4. Click Delete.
5. Confirm the deletion by clicking Delete again.

The device is permanently removed and can no longer generate TOTP codes. If you need the device again, you must create a new one with the original shared secret.

You can also delete a device via the API.