Troubleshooting and FAQ
| Problem | What to do |
|---|---|
| Code is "invalid" | Set the phone to automatic date and time, and type the code before it changes. |
| Locked after wrong codes | Wait 15 minutes, then sign in again. |
| Lost phone | Use a backup code, then disable and set up 2FA again. |
| Lost phone and backup codes | Contact CartWhizz support. Admins can't reset another person's 2FA. |
| Staff can't reach the admin | Admin enforcement is Required; they must finish setup at sign-in. |
| I switched the module off but people still get asked | Expected. Existing 2FA stays on; each person can turn their own off. |
| Email or SMS codes not offered | They're marked coming soon. Use an authenticator app. |
Is 2FA the same as OTP login? No. OTP login (the OTP Verification module) replaces the password with a code sent by SMS or email. 2FA adds a second step after the password.