Authenticator app
Use six-digit, time-based TOTP codes from a standard authenticator app. Codes refresh automatically and work without SMS.
Security
Multi-factor authenticationMore than a password
Add a second proof of identity to reduce account takeover risk, protect privileged changes, and keep a recovery path available when a device is lost.
Available methods
Choose a factor that fits how you work.
Passkey
Register a WebAuthn passkey backed by your device, browser, or security key for a phishing-resistant sign-in check.
Backup codes
Generate ten single-use recovery codes and store them somewhere separate from the device used for authentication.
Setup
Secure the account in four steps
Open security settings
Sign in to Wox and open the security area for your personal account.
Choose a method
Add an authenticator app or register a passkey on a device you control.
Complete verification
Confirm the new factor before it becomes available for future sign-ins.
Store recovery codes
Save the single-use backup codes offline or in a trusted password manager.
Recovery
Plan for a lost device
Set up recovery before you need it. A remaining trusted method is safer and faster than trying to recover an account during service.
- Use one unused backup code if your primary authenticator is unavailable.
- If you can still sign in, remove a lost passkey and generate a fresh backup-code set.
- If every method is unavailable, use the account recovery path or contact support—never send anyone a one-time code.
Sensitive changes
Security settings require fresh proof.
Enrolling or removing authentication factors is protected by a recent-authentication check. This helps prevent an unattended or old session from silently changing the account's recovery methods.
Recommended practice
Small habits that prevent lockouts and takeovers
Individual accounts
Give every team member their own Wox account.
More than one recovery method
Register a second recovery option whenever practical.
Keep backup codes separate
Store them away from the phone used for authentication.
Treat unexpected prompts as suspicious
Never approve one or share a one-time code.
Protect your Wox account now.
Review your registered methods and recovery options in account security.