Screens with sensitive data (payroll, identity, bank and health details, the audit log) need a second step after sign-in. Without it you see the basics only, with a strip saying «Some data is hidden until you confirm your sign-in with a second step».
Set up the authenticator app (once)
- Press «Turn on the second step» in the strip, or go to «My preferences → Security».
- If asked, confirm your sign-in first with the code you receive.
- Press «Set up authenticator app».
- Install an authenticator app on your phone (like Google Authenticator or Aegis) and scan the QR code on screen. Can't scan? Copy the key and enter it in the app by hand.
- Type «The first code shown in the app» and press «Confirm and turn on». You see «The authenticator app is on.»
Each time you open a sensitive screen
- Press «Confirm sign-in» in the strip at the top.
- Pick the «Verification method»: «Authenticator app», or «Email» and press «Send me the code», or «WhatsApp» if your company uses it.
- Enter the «Verification code» and press «Verify».
If it doesn't work
- The app's code changes every few seconds. Type the current one, and make sure your phone sets its clock automatically.
- Phone not with you? Choose «Email» as the method.
- Email code not arriving? See what to do if the code doesn't arrive.
- Several wrong codes in a row lock the account for a few minutes, so don't guess.
If you work in HR, finance or management, turn it on from day one. And when you give someone payroll access, make sure they have it on. See how to give someone access.
Related articles
These steps describe Diwan as of 10 October 2026. The product keeps improving, so if a name on screen differs from this page, the screen is right.
