Two-Word Phrases vs. 6-Digit Time-Based One-Time Passcodes (TOTPs)

Salesforce Ecosystem Accounts and Other Accounts

The way you use two-word phrases and TOTPs depends on the type of account you use with Salesforce Authenticator. Here's how we break down the two types of accounts.

We use the term Salesforce Ecosystem Accounts to refer to Salesforce-related accounts that support the full set of Salesforce Authenticator features, including push notifications and automations. These accounts make up the Salesforce ecosystem:

• Salesforce.com
• Commerce Cloud
• Heroku
• Sales Cloud
• Marketing Cloud
• MuleSoft
• Quip
• Tableau

Note This list doesn't include all Salesforce-related accounts because they don't all support all Salesforce Authenticator features. For example, this list doesn't include Slack even though it's a Salesforce company.

When we refer to other accounts, we mean any account that isn't part of the Salesforce ecosystem. For example, other accounts can include Slack, Google, and Facebook accounts.

Two-Word Phrases

Two-word phrases are only for connecting Salesforce ecosystem accounts to Salesforce Authenticator. You can't use them to connect other accounts.

When you connect a Salesforce ecosystem account, you start from the service that you're trying to connect to. The specific flow depends on the account and your company, but in all cases, the service prompts you to enter a two-word phrase from Salesforce Authenticator. To get the two-word phrase, open Salesforce Authenticator and tap Add an Account. Salesforce Authenticator pops up a screen with a two-word phrase. Enter the two-word phrase as prompted.

Below the two-word phrase that displays in Salesforce Authenticator, you also see an option to scan a QR code. For Salesforce ecosystem accounts, ignore this option. You can use QR codes only to connect to other account types.

Six-Digit TOTP Codes

Six-digit TOTP codes are used for verifying your identity when you log in. Each TOTP remains valid for 30 seconds. The TOTP's countdown timer is displayed in the app.

How you use TOTPs depends on your account type.

• For Salesforce ecosystem accounts, six-digit TOTP codes are one option for verifying your identity. For a smoother login experience, enable push notifications or set up automation instead. If push notifications or automations aren't working, though, six-digit TOTPs can come in handy.
• For other accounts, six-digit TOTP accounts are the only option for verifying your identity.

  For example, here's how you can use Salesforce Authenticator to verify your identity when you log in to a Google account. Google prompts you to enter a code from Salesforce Authenticator. You open Salesforce Authenticator and find your Google account, then enter the six-digit TOTP in Google.

  For more information, see Use Salesforce Authenticator with Your Other Accounts.