Two-factor authentication adds a second step to admin login. After entering your password, you enter a one-time code, so your Canny account stays protected even if your password is compromised. 2FA is available on every plan, at no extra cost.
đĄ 2FA applies to admins only. Your end users are not affected. Nothing changes about how they log in to your portal or submit feedback.
Setting up 2FA
The next time you log in, you'll see the option to set up 2FA. You can complete the setup then, or skip it and turn it on later.
To turn 2FA on:
Go to Settings â Preferences â Security.
Select Set it up.
Follow the on-screen steps to link your authenticator app.
Enter the code from your authenticator app to confirm.
From then on, you'll be asked for a code each time you log in.
You can turn 2FA on for yourself whether or not your team requires it.
Requiring 2FA for your whole team
Owners can make 2FA mandatory for every admin on the account.
Go to Settings â Team â People.
Turn on Require two-factor authentication.
Admins who haven't set up 2FA yet are prompted to do so the next time they log in, and can't skip it.
â ď¸ Only owners can enforce 2FA. See Admin roles for what each role can do.
If you lose access to your 2FA codes
If you can't get a code (for example, you've lost or replaced your phone), your 2FA setup needs to be reset before you can log in again.
There are two ways to do this:
Ask an owner on your account. Owners can reset 2FA for any admin from Settings â Team â People.
Contact Canny support. We can reset it for you.
Once your setup is reset, you'll be prompted to set up 2FA again the next time you log in.
Teams using SSO
If your team logs in through Okta, OpenID Connect (OIDC), or OneLogin, Canny's 2FA doesn't apply. Authentication is handled entirely by your identity provider, so admins aren't prompted to set up 2FA and owners don't need to enforce it. Configure multi-factor authentication in your identity provider instead.
FAQs
Is 2FA available on my plan?
Yes. 2FA is available to all Canny accounts on every plan.
Do my end users need to set up 2FA?
No. This only affects admins on your team. Your portal and widget login experience is unchanged.
Can I skip the setup prompt?
Yes, unless an owner on your account has made 2FA mandatory. If it's optional, you can skip the prompt and enable it later under Settings â Preferences â Security.
Can I turn 2FA off?
You can disable it for yourself under Settings â Preferences â Security, as long as your account doesn't require it.