Additional verification during sign-in | FAQ - Zoho Accounts

Why am I being asked for additional verification during sign-in?

Note: This additional verification won't be asked every time and is not the same as multi-factor authentication (MFA). We will ask you to verify only when we detect the sign-in attempt to be unusual. Also, for MFA-enabled accounts, this verification won't be prompted. Read below to learn more.
Most users use only a password to sign in to their accounts, which provides only a weak form of account security. Users also tend to reuse the same password across multiple apps. As per a survey conducted in 2019, 65% of the users reuse their password for multiple accounts.

Coupled with this weakness, passwords are also susceptible to getting exposed due to the growing number of data breaches, which in turn can lead to one's account getting compromised. The technique in which an attacker can use an exposed password (found in data breaches) and use it to gain access to users' accounts is called "credential stuffing". It is different from "brute-force attacks", where the attacker won't know the exact password, but have to guess and repeat entering different passwords in an automated manner. In credential stuffing, the attacker will have the actual list of credentials to try out.

For example, consider that a user John is using the same password for their Zoho account and for another app ABC. If ABC encounters a password breach, an attacker can obtain this exposed password and use it to sign in to John's Zoho account through credential stuffing.

To avoid this from happening, we will ask for additional verification whenever we find a sign-in attempt to be unusual. What makes a sign-in attempt unusual depends on certain factors, including the location and the device the user is signing in from. Since this additional verification requires the user to have access to their email inbox or device, an attacker will not be able to do this verification and gain access to the account.

What options are available to complete this verification?

The available options depend on the recovery options you've configured for your account. Totally, there are three options:
  1. Verify using email address - You will need to enter an OTP sent to your email address.
  1. Verify using mobile number - You will need to enter an OTP sent to your mobile number.
  1. Verify using recovery device - A number will be shown on the sign-in page. You will need to tap this number on the push notification sent to your OneAuth-installed recovery device.
Info: If you've only signed in to Zoho OneAuth, but haven't configured MFA yet, it is considered as a recovery device.

What if you are unable to complete the verification?

If you're part of an organization as a user:
  1. Contact your administrator to get a backup verification code. (If you're an administrator, you can generate backup code for a user from Zoho Directory.)
  2. After getting the backup code, click View all options in the sign-in page where you're being asked additional verification.
  3. Click Problem signing in?.
  4. Select the option Use backup verification code.
  5. Enter the code you got from your administrator, then click Verify.
If you're the administrator of your organization (or) If you're a personal user and not part of any organization:
Please contact us at support@zohoaccounts.com. After verifying your identity, we will provide a backup verification code for you to sign in to your account.

Please note that if any further sign-in attempt seems unusual, this verification will still be asked.

How to avoid this additional verification?

This verification will be asked only for Zoho accounts that are being signed-in using just a password. If you enable multi-factor authentication (MFA) for your account, we won't ask for this verification, as MFA itself would take care of your account's security.

We recommend enabling MFA using our authenticator app–Zoho OneAuth. Aside from heightened security, it also provides swift sign-in options such as Smart QR sign-in and passwordless sign-in.


If you have any queries or encounter any issue, please write to us at support@zohoaccounts.com.

    Access your files securely from anywhere

      Zoho CRM Training Programs

      Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.

      Zoho CRM Training
        Redefine the way you work
        with Zoho Workplace

          Zoho DataPrep Personalized Demo

          If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.

          Zoho CRM Training

            Create, share, and deliver

            beautiful slides from anywhere.

            Get Started Now


              Zoho Sign now offers specialized one-on-one training for both administrators and developers.

              BOOK A SESSION





                          Quick LinksWorkflow AutomationData Collection
                          Web FormsEnterpriseBegin Data Collection
                          Interactive FormsWorkplaceData Collection App
                          CRM FormsCustomer ServiceAccessible Forms
                          Digital FormsMarketingForms for Small Business
                          HTML FormsEducationForms for Enterprise
                          Contact FormsE-commerceForms for any business
                          Lead Generation FormsHealthcareForms for Startups
                          Wordpress FormsCustomer onboardingOrder Forms for Small Business
                          No Code FormsConstructionRSVP tool for holidays
                          Free FormsTravel
                          Prefill FormsNon-Profit

                          Intake FormsLegal
                          Mobile App
                          Form DesignerHR
                          Mobile Forms
                          Card FormsFoodOffline Forms
                          Assign FormsPhotography
                          Mobile Forms Features
                          Translate FormsReal EstateKiosk in Mobile Forms
                          Electronic Forms

                          Notification Emails for FormsAlternativesSecurity & Compliance
                          Holiday FormsGoogle Forms alternative GDPR
                          Form to PDFJotform alternativeHIPAA Forms
                          Email Forms
                          Encrypted Forms
                          Embeddable Forms
                          Secure Forms
                          Drag & drop form builder
                          WCAG



                                            You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.




                                                Manage your brands on social media


                                                  • Desk Community Learning Series


                                                  • Digest


                                                  • Functions


                                                  • Meetups


                                                  • Kbase


                                                  • Resources


                                                  • Glossary


                                                  • Desk Marketplace


                                                  • MVP Corner


                                                  • Word of the Day


                                                  • Ask the Experts


                                                    Zoho Marketing Automation

                                                      Zoho Sheet Resources

                                                       

                                                          Zoho Forms Resources


                                                            Secure your business
                                                            communication with Zoho Mail


                                                            Mail on the move with
                                                            Zoho Mail mobile application

                                                              Stay on top of your schedule
                                                              at all times


                                                              Carry your calendar with you
                                                              Anytime, anywhere




                                                                    Zoho Sign Resources

                                                                      Sign, Paperless!

                                                                      Sign and send business documents on the go!

                                                                      Get Started Now




                                                                              Zoho TeamInbox Resources



                                                                                      Zoho DataPrep Resources



                                                                                        Zoho DataPrep Demo

                                                                                        Get a personalized demo or POC

                                                                                        REGISTER NOW


                                                                                          Design. Discuss. Deliver.

                                                                                          Create visually engaging stories with Zoho Show.

                                                                                          Get Started Now









                                                                                                              • Related Articles

                                                                                                              • Sign-in modes

                                                                                                                Zoho offers various modes to sign in to your Zoho account, from the conventional method of signing in using only a password to the more secure method of signing in without using a password at all (passwordless sign-in). You can choose your preferred ...
                                                                                                              • Sign in using passkey

                                                                                                                What is a passkey Passkey is based on the FIDO multi-device credentials technology and essentially aims to replace traditional passwords altogether. At Zoho, we've also implemented this technology and offer you the option to secure your account using ...
                                                                                                              • Troubleshoot sign-in related issues

                                                                                                                Please select the issue you have while signing in to your account: Getting an error when trying to sign in Having issues with multi-factor authentication (MFA) and couldn't access the account Having issues connecting to mail client Forgot the account ...
                                                                                                              • Passwordless Sign-in

                                                                                                                Our OneAuth's passwordless sign-in mode offers you a secure and seamless way to sign in to your Zoho account. It's a form of multi-factor authentication (MFA) where you don't need to enter your password to sign in. Regular MFA sign-in: Username ----> ...
                                                                                                              • Federated Sign-in

                                                                                                                Federated Sign-in allows you to access your Zoho account using third-party services. You can create your Zoho account using your third-party account credentials, and also use them to sign in. The following services are supported by Zoho for signing ...
                                                                                                                Wherever you are is as good as
                                                                                                                your workplace

                                                                                                                  Resources

                                                                                                                  Videos

                                                                                                                  Watch comprehensive videos on features and other important topics that will help you master Zoho CRM.



                                                                                                                  eBooks

                                                                                                                  Download free eBooks and access a range of topics to get deeper insight on successfully using Zoho CRM.



                                                                                                                  Webinars

                                                                                                                  Sign up for our webinars and learn the Zoho CRM basics, from customization to sales force automation and more.



                                                                                                                  CRM Tips

                                                                                                                  Make the most of Zoho CRM with these useful tips.



                                                                                                                    Zoho Show Resources