How do I set up two-step verification for my Sprout account?

You can secure your Sprout account by requiring an additional verification code like Google Authenticator.

How do I enable two-step verification?

To configure Two-Step Verification, navigate to the Security page in Settings.

Any user can optionally enable Two-Step Verification for their login. Additionally, the Account Owner can require that all users on the account configure Two-Step Verification.

Click Submit to begin configuring Two-Step Verification, then follow the instructions to complete setup.

Note: If Require two-step verification for all users is enabled, all users on the account are logged out and required to configure Two-Step Verification once they try and log back in.

How do I configure two-step verification?

While we recommend using Google Authenticator to ensure seamless setup of Two-Step Verification, you can also use other verification apps like Microsoft Authenticator. 

1. Download either the Google or Microsoft Authenticator app to your mobile device.
2. Click Next after the download completes. Sprout produces a QR code for you.
3. Scan the QR code with your mobile device using your authenticator app.
4. Click Next. Sprout asks you to verify your device with the code you receive in your authenticator app.

Note: It's also possible to configure by manually typing in a secret code. Select that option in Google Authenticator and click the link labeled Or, you can manually enter a secret code in Sprout.
 

After verifying your device, Sprout produces 10 backup codes. These codes can be used to verify your account in the event you do not have access to your mobile device and an authenticator app.

Each backup code can be used only once. Make sure to write these down or print them out and save them in a secure place accessible only to you.

If you use all of your backup codes, or you lose them, new codes can be regenerated from the Security page at any time.

After you've saved your backup codes, click Done to complete the Two-Step Verification setup.

How do I log in once two-step is enabled?

Once two-step verification is configured, any time you try to log in to Sprout on web or on mobile, you get prompted for a verification code after you type in your password.

How do I use Google Authenticator?

Google Authenticator produces a new verification code on a short timer. To ensure access to your Sprout account, be ready to type in the verification code presented in Google Authenticator when Sprout prompts you for verification.

For security purposes, Google Authenticator only stores your configuration locally on your device. If you delete and reinstall Google Authenticator, or you replace your mobile device with a new one, your previous configuration profile for Sprout Social will no longer be available. In the event that this happens, you will need to use one of the generated backup codes to log into your Sprout Social account and reconfigure Two-Step Verification from the Security page.

If, for whatever reason, you no longer have access to neither your Google Authenticator app and your backup codes, contact Sprout Support.

Troubleshooting two-step verification

My verification codes aren't working — what should I do?

Two-step verification codes are time-based, which means your mobile device's clock must be accurate for codes to work. If your codes are suddenly being rejected, try the following steps:

Android:

1. Open the Google Authenticator app.

2. Tap More (⋮) > Settings.

3. Tap Time correction for codes.

4. Tap Sync now.

The app will confirm the time has been synced. This only affects the internal time of Google Authenticator — it will not change your device's Date & Time settings.

iOS:

1. On your iPhone, go to Settings > General.

2. Tap Date & Time.

3. Enable Set Automatically.

4. If it's already enabled, toggle it off, wait a few seconds, and toggle it back on.

I have multiple Sprout Social entries in my authenticator app

If you previously set up two-step verification and then reconfigured it (for example, after using a backup code), you may have more than one Sprout Social entry in your authenticator app. Only the most recent entry generates valid codes.

To fix this:

1. Remove all Sprout Social entries from your authenticator app.

2. In Sprout, go to Settings > Security and click Set up Device to generate a fresh QR code.

3. Scan the new QR code with your authenticator app.

4. Save your new backup codes.

I switched phones or reinstalled my authenticator app

Google Authenticator stores your configuration locally on your device. If you replace your phone or delete and reinstall the app, your previous Sprout Social profile will no longer be available.

To regain access:

1. Log in to Sprout using one of your backup codes (click "Use one of your backup codes instead" on the verification screen).

2. Once logged in, go to Settings > Security and click Set up Device to reconfigure two-step verification on your new device.

3. Save your new backup codes.

I don't have my authenticator app or my backup codes

If you've lost access to both, please contact Sprout Support. Our team can assist with resetting your two-step verification configuration. Note: this process requires additional security verification to protect your account.