Move the authenticator app to a new phone
New phone, or reinstalling your authenticator app? Move Opensolr to it while the old phone still shows codes, so your next sign-in does not ask for a code you no longer have.
Move it, step by step
- Sign in with your email, your password and the code from your old phone. Open Account › TFA (on a phone: Account › Two-Factor Auth), or go to https://opensolr.com/admin/solr_manager/tfa.
- In Authenticator app, click Remove authenticator app. Enter a code from your old phone, or a recovery code, and click Remove. With SMS codes on, an SMS code works too: Send SMS code sends one.
- Click Set up authenticator app and scan the new QR code with the app on your new phone. Cannot scan it? Add an account in the app and type the key shown next to it (Copy key helps).
- Enter the 6-digit code your new phone shows and click Turn on. Not accepted? Check the time on your phone and try the newest code.
- If recovery codes appear, save them with Copy or Download .txt, then click I saved them. You will not see them again.
- On the old phone, delete the old Opensolr entry: its codes no longer work.
You stay signed in the whole time. If the authenticator app was your only method, the page says Two-factor authentication is required until step 4, and the rest of your account opens again after it. Finish within 15 minutes of clicking Set up authenticator app, or the page says The setup expired. Please start again. Opensolr emails your account address when the app is removed and when it is turned on.
Your recovery codes
- If the authenticator app was your only method, removing it also deletes your recovery codes, and turning it on again gives you 10 new ones (step 5).
- With SMS codes on too, the recovery codes you already saved keep working.
Two devices with the same codes
At step 3, scan the same QR code with both devices, a second phone or a tablet for example, or type the key on both, before you click Turn on. Both then show the same codes, and either one signs you in. The QR code is not shown again after Turn on: to add a device later, repeat the steps above and scan with both.
Old phone already gone?
Have a recovery code? On the code screen after your password, click Use a recovery code. With SMS codes on, click Send SMS code there instead. Once signed in, follow the steps above and confirm step 2 with another recovery code or an SMS code. No code at all? See sign-in asks for a code you don't have.
Before you reset or sell your phone
- Move the authenticator app to your new phone first, with the steps above. Do the same before you uninstall the authenticator app.
- Keep your recovery codes somewhere other than that phone. Lost them? Click Create new recovery codes on the same page and confirm with a current code. The old ones stop working.
Security pages
- Security overview
- Secure your account
- HTTP Basic Auth
- IP restriction
- Two-factor authentication
- A code you don't have
- No recovery codes left
- Forgot your password
- Where is the QR code
- Move 2FA to a new phone
- Codes and your email
- A new master API key
- A new index password
- Switch to scoped keys
- IP rules by handler
- Search from the browser (CORS)