Two-factor and security

Every sign-in on CallsFlow Plus uses two steps: your password, then a one-time code.

Signing in

1. Go to <your-slug>.callsflowplus.com.
2. Enter your Email and Password.
3. Enter the 6-digit code. By default it is emailed to you.
4. Optionally tick Remember this device for 30 days so you are not asked for a code again on that browser for 30 days.

Only tick "remember" on a device you trust.

Using an authenticator app

An authenticator app replaces emailed codes. To set it up:

1. Open Security.
2. Click Set up authenticator app.
3. Scan the QR code with your authenticator app, or type in the secret shown.
4. Enter a code from the app under Then enter a code from the app and click Confirm.

From then on, sign in with the app's 6-digit code.

To go back to emailed codes, open Security, enter a current app code under Enter a current app code to disable, and click Disable.

Keeping your account safe

• Use a strong, unique password of at least 8 characters.
• Do not share logins. Invite each person with their own login. See Users and invites.
• Publisher API tokens and RTB keys are secrets. Rotate them if they leak: Rotate token on a publisher, or Rotate on a source. See Publishers and sources.
• Secret values in a lead buyer's spec are masked after saving.

Not getting the code

Check your spam folder and that you are using the email on your login. If you still cannot sign in, contact your platform admin.

Partner logins

Publisher and buyer logins have their own Security page with the same options.