Okta Verify FAQ

Okta Verify is an authenticator that allows you to confirm your identity using your device so you - and only you - can sign in to your Okta account securely.

With the Okta Verify app, you can:

• Enroll your device with your Okta account.
• Add additional accounts that require Okta Verify for authentication. You can also add non-Okta apps!
• Manage the list of accounts enrolled with your mobile device.
• Review the terms and conditions, privacy policy, and third party software notices.

From the Okta Verify app, you cannot:

• Access or sign in to your Okta account directly. Instead, sign in to your account from a desktop computer, from a mobile browser, or use the Okta Mobile app.
• Reset your Okta Verify enrollment directly from the app. If you are locked out or forgot your password, follow the instructions in Reset your current Okta Verify enrollment.

Okta Verify is available for iOS devices from the Apple App Store and for Android devices from Google Play.

If you're a new user, follow the steps in Set up Okta Verify as a new user.

You can also watch our video tutorial on how to set up Okta Verify for the first time.

When working with Okta Verify, those terms all mean essentially the same thing: establishing or re-establishing a connection between your Okta account and the specific Okta Verify app installed on your device.

Follow the steps in Sign in to your org with Okta Verify.

The End User Dashboard (not to be confused with the Okta Admin Dashboard) is the landing page that you see when you sign in to your Okta account. The dashboard shows all of the apps available to you and also allows you to edit your profile settings.

If any of the following applies to you, you may need to reset Okta Verify yourself or ask your IT admin to reset it for you:

• You set up Okta Verify already but accidentally deleted the app from your device or had to wipe and reset your device.
• You set up Okta Verify on your previous device but want to use a new device instead.
• You're stuck in an authentication loop where the web browser instructs users to consult the Okta Verify app but the app does not receive a push notification or display a one-time code.
• You can't sign in to your account even if you enter the correct passcode from the app or approve a pop-up notification sent to your device.
• You keep receiving a verification code error in the Okta Verify app.

After you or your admin resets your Okta Verify enrollment, your device will no longer be enrolled with your Okta account so you'll need to set it up again from the beginning.

To reset your account, follow the steps in Reset your current Okta Verify enrollment.

Currently Okta Verify only supports one device at a time.

No. For security reasons, you cannot transfer Okta Verify from one device to another. You have to remove the existing Okta Verify enrollment tied to your previous device and then enroll Okta Verify on your new device as described in Reset your current Okta Verify enrollment. If you cannot access your Okta account, please contact your company's IT department to enroll your new device for you.

No. If you no longer have your previous device with Okta Verify installed on it and you are not enrolled in an additional Okta authentication factor, you will have to contact your company's IT department to enroll your new device for you.

No. Your current Okta Verify enrollment is still tied to the specific Okta Verify app that you deleted from your device. Reinstalling Okta Verify and trying to enroll again won’t work until your current Okta Verify enrollment is removed from your Okta account. In this case, only your IT administrator can remove your current Okta Verify enrollment. Please contact your company's IT department to enroll your new device for you.

No. Your current Okta Verify enrollment is still tied to the specific Okta Verify app that was wiped when you factory reset your device. Reinstalling Okta Verify and trying to enroll again won’t work until your current Okta Verify enrollment is removed. In this case, only your IT administrator can remove your current Okta Verify enrollment and enroll your new device for you.

The clock on your device may not be in sync with the time maintained by your cellular provider’s network. Even small differences between your device clock and the network clock can cause enrollment to fail. Check the automatic date and time settings on your device.

Possible reasons for this are:

• The clock on your device may not be in sync with the time maintained by your cellular provider’s network. Even small differences between your device clock and the network clock can cause enrollment to fail. Check the automatic date and time settings on your device.
• You restored your device from a backup. The Okta Verify token is not restored when you restore from backup. Set up Okta Verify again by following the steps in Reset your current Okta Verify enrollment.

Possible reasons for this are:

• The clock on your device may not be in sync with the time maintained by your cellular provider’s network. Even small differences between your device clock and the network clock can cause enrollment to fail. Check the automatic date and time settings on your device.
• You restored your device from a backup. The Okta Verify token is not restored when you restore from backup.

No. Before deleting Okta Verify from your previous device or getting a new device, you need to log into your non-Okta services to set up your new device with those codes. You will not be able to retrieve those code after you no longer have access to Okta Verify on your previous device.

A QR code is a universal barcode that can be scanned and read by your device's camera. Okta uses QR codes to enroll your device with your Okta account. Usually you should only have to do this once, but if you or your IT department resets your account, you'll need to scan a new QR code to enroll again successfully. For how to scan the QR code, see Enroll your device with Okta Verify.

If you can't scan the QR code, see Enroll your device without scanning a QR code.

When enrolling your device into Okta Verify for the first time, you have two options: 1) Use the app to scan the QR code on your computer or 2) Generate a Secret Key and enter it on your device to enroll your device without scanning a QR code. The Secret Key is not the Security Key (described below) and not the 6-digit temporary passcode that you can see in Okta Verify and enter in your browser to access your Okta account. To learn more about using the Secret Key, see Enroll your device without scanning a QR code.

A Security Key (U2F) is device that can be plugged into your computer to enhance multifactor authentication. Examples of Okta-supported U2F security keys include YubiKey or Titan Security Key. To learn whether it applies to your organization, contact your administrator.