Managing two-step verification

Two-step verification is a two-step sign-in process that requires a one-time code from a mobile app, phone call, or text message in addition to the main Zoom sign-in for users with the work email (email and password) login type. This provides an additional layer of security since users will need access to their phone to sign in to the Zoom web portal, desktop app, mobile app, or Zoom Room.

Admins can enable two-step verification for users, requiring them to set up and use two-step verification. Admins can also reset an existing two-step verification setup if a user has lost access to their authenticator app or verified device.

Note: If two-step verification is disabled, users with a work email login type are required to enter a time-based one-time password (OTP) sent to their email if Zoom detects an unusual login from a different country or device than normal.

Requirements for two-step verification

Enable two-step verification

• Account owner or admin privileges
• Pro, Business, Education, or Enterprise account

Set up and use two-step verification

• Phone number that can receive SMS; or
• Android or iOS device with an authenticator app that supports Time-based One-Time Password (TOTP) protocol. The following apps are recommended:
  • Google Authenticator (Android, iOS)
  • Microsoft Authenticator (Android, iOS, Windows)
  • FreeOTP (Android, iOS)
  • Passwords (iOS)
• Zoom desktop app for Windows, macOS, or Linux: Global minimum version or higher
• Zoom Rooms for Conference Room for Windows or macOS: Global minimum version or higher
• Users with the work email (email and password) login type

Admin

Enable or disable two-step verification

You can enable two-step verification for all users in your account, users with specific roles, or users in specific groups.

1. Sign in to the Zoom web portal as an admin.
2. In the top-right corner, click your profile picture or initials, then click Admin Center.
3. In the side menu, click Security and trust .
4. Click General.
5. Under Security, click the Sign in with two-step verification toggle to enable or disable it.
6. If a verification dialog appears, click Enable or Disable to verify the change.
7. Select one of these options to specify the users to enable two-step verification:
   • All users in your account: Enable two-step verification for all users in the account.
   • Users with specific roles: Enable two-step verification for roles with the specified roles.
     • To the right of Selected user roles, click the pencil icon, select the roles, and click OK.
   • Users belonging to specific groups: Enable two-step verification for users who are in the specified groups.
     
     • To the right of Selected user groups, click the pencil icon, select the groups, and click OK.
8. If user roles or groups were specified, click Save to confirm the changes.
   Note: You can share the instructions to set up two-step verification with your users.
9. Under Authentication methods, enable or disable one of the following authentication methods.
   • Authenticator app: Use a third-party authentication app to generate login codes. (Example: Google Authenticator, Microsoft Authenticator, and FreeOTP.)
   • Phone code & email code: Use text message, SMS, or email address to send login codes.
     Note: At least one of these authentication methods must be selected. The verification method will be selected dynamically based on your sign-in method.
10. Click Save to apply your changes.

Reset two-step verification for a user

You can reset a current two-step verification setup if a user has lost access to their two-step verification setup. For example, they misplaced their device, uninstalled the two-step verification app, or removed Zoom from their two-step verification app.

1. Sign in to the Zoom web portal as an admin.
2. In the top-right corner, click your profile picture or initials, then click Admin Center.
3. In the side menu, click Security and trust .
4. Click General.
5. Under Security, click Reset two-step verification.
   A pop-up window will appear.
6. In the window, enter the email addresses or usernames that you want to reset.
   Note: All the selected users' configurations will be reset.
7. Enter your password to reset the two-step verification.
8. Click Reset for ___ User(s) to confirm.

User

Turn on and turn off two-step verification from the Profile page

1. Sign in to the Zoom web portal.
2. In the top-right corner, click your profile picture or initials, then click Profile.
3. Under Sign In, to the right of Two-Step Verification, do the following actions:
   • If Two-Step Verification is Off, click Turn On to enable it.
   • If Two-Step Verification is On, click Turn Off to disable it.
4. Enter your password to turn on or turn off two-step verification.
5. If a verification dialog appears, click Next to enable two-step verification, or click Turn off to disable two-step verification.

Set up two-step verification

If your Zoom admin has enabled two-step verification for you, you must set up two-step verification when you sign in to the Zoom portal.

1. Sign in to the Zoom web portal after your admin has enabled two-step verification.
2. Select Authentication App or SMS as your authentication method.
3. Follow one of these sections depending on what you selected:

Sign in using two-step verification

Use the authenticator app

1. Sign in to the Zoom web portal, desktop app, mobile app, or Zoom Room.
2. Enter your password.
3. Access your authentication app to receive a verification code.
4. Enter the code from the authenticator app.
5. Click Verify.

Use phone verification

1. Sign in to the Zoom web portal, desktop app, mobile app, or Zoom Room.
2. Enter your password.
3. Select one of the following phone verification methods:
   • Send code via SMS
   • Send code via phone call
4. Enter the verification code that you have received from the phone call or SMS.
5. Click Verify.

Sign in using a two-step verification recovery code

If you no longer have access to your two-step verification codes (for example, you misplaced your device, uninstalled your two-step verification app, or removed Zoom from the two-step verification app, you can sign in using a recovery code you obtained when you set up two-step verification.

Note: You can also contact your admin to reset your two-step verification setup. When you sign in to the Zoom web portal, desktop app, or mobile app, you will be prompted to set up two-step verification again.

1. Sign in to the Zoom web portal, desktop app, mobile app, or Zoom Room.
2. Enter your password.
3. At the bottom of the page, click Try another way.
4. Click Recovery codes.
5. Enter one of the recovery codes you obtained during setup.
   Note: Each recovery code can only be used once.
6. Click Verify to sign in.
7. (Optional) If you lost access to your two-step verification device, edit your existing two-step verification setup to add a new device.

Edit your two-step verification setup

After setting up two-step verification, you can edit your existing setup if you want to remove a device, set up two-step verification on another device, or view recovery codes.

1. Sign in to the Zoom web portal.
2. In the top-right corner, click your profile picture or initials, then click Profile.
3. Under Sign In, in the Two-Step Verification section, use these options to set up two-step verification on a new device or remove an existing setup:
   
   • Authentication App
     • Set Up: Set up two-step verification using a supported two-step verification app. This option is only visible if you don't have an existing two-step verification setup that uses a two-step verification app.
     • Change Device: Set up two-step verification again using a supported two-step verification app. This option is only visible if you have an existing two-step verification setup that uses a two-step verification app.
     • Remove Device: Remove the existing two-step verification setup that uses a two-step verification app.
   • Phone
     • Set Up: Set up two-step verification using a phone number that can receive a phone call or SMS. This option is only visible if you don't have an existing two-step verification setup using a phone call or SMS.
     • Remove Phone: Remove the existing two-step verification setup that uses a phone call or SMS.
   • Recovery Codes: Click View Codes to view a list of recovery codes.