2-factor authentication adds an extra layer of protection to your Loomly account. Activating this feature requires a 6-digit verification code from a third-party authentication app that supports OTP (such as Google Authenticator or Authy by Twilio) to access the account.
⚠️ Loomly's team may not be able to recover your account if you do not have access to your authentication app or Backup Codes due to security reasons.
1. Set up Two-Factor Authentication for your account
1. Go to the Password & Security tab of Account Settings
2. Select Setup Two-Factor Authentication
Step 1: Set up the authentication app by scanning the QR code, or you can enter the code manually
Step 2: Enter the 6 digit verification code generated by the app, then enter your current password
Step 3: Save your Backup Codes on a different device in case you lose the device, or you lose access to the authentication app
3. Select Enable Two-Factor Authentication, then you're all set once you can manage backup codes and disable this feature
Backup Codes
If you ever lose access to the device with the authentication app or lose access to the app, we highly recommend saving the backup codes from step 3 of your two-factor authentication setup.
Please store these backup codes by printing them out or saving them to a password manager.
Each backup code can only be once. If you happen to use each backup code, please generate new backup codes by going to Manage backup Codes.
Disabling Two-Factor Authentication
Two-factor authentication should be disabled in these cases:
If you're replacing your device, please disable two-factor authentication then re-enable this with your new device
Please disable this feature if you need to update your email address for your account, but feel free to re-enable this once you confirm your updated email address
2. Calendar Two-Factor Authentication (2FA) Enforcement
Calendar 2FA Enforcement, offered on the Advanced Plan and up, allows requiring any collaborators who are invited to a calendar to set up two-factor authentication (2FA) for their Loomly login, providing an additional layer of security at the calendar level.
A collaborator that does not have 2FA setup and is invited to a calendar that has Calendar 2FA Enforcement will not be able to access the calendar until they set up 2FA.
📝 Note: The Calendar Owner will only be able to activate or deactivate this feature for a calendar.
How to set up Calendar 2FA Enforcement
Go to the Options tab of Calendar Settings, then check "Require two-factor authentication in order to access this calendar"
Click Save
Once completed, all collaborators invited to that calendar must set up 2FA to access the calendar.
How to disable Calendar 2FA Enforcement
Go to the Options tab of Calendar Settings, then uncheck "Require two-factor authentication in order to access this calendar"
Click Save
What happens if a collaborator tries accessing a Calendar with 2FA Enforcement?
Collaborator who has 2FA setup
They will be able to access the calendar as they normally can without this feature activated.
Collaborator who does not have 2FA setup
They will not be able to view or access the calendar. They will receive email and push notifications, but they will not be able to access the content as they will be blocked (see below).
On web app:
On mobile:
3. How do I regain access to my account if I have 2-factor authentication set up?
We require that all conditions are satisfied to recover your account due to security purposes. Please see below for requirements depending on your account type.
For Subscribers (Calendar Owners with a current active subscription)
Send an email to contact@loomly.com from your account's email address that you would like to have two-factor authentication reset.
CC two team members with the same domain, preferably managers or admins, who can confirm your identity.
Verify the last four-digits of the credit card on file for the subscription.
For collaborators or users without an active subscription
Send an email to contact@loomly.com from your account's email address that you would like to have two-factor authentication reset.
CC the subscriber who can confirm your identity if you are a user under an active subscription.
CC two team members with the same domain, preferably managers or admins, who can confirm your identity.
📝 Note: If you do not hear back from our team within 72 hours, please feel free to follow up with us here.