Two Factor Authentication (2FA)

Two-factor authentication (2FA) adds a second layer of security to your Provident Metals account. This FAQ explains how it works, how to set it up, and how to fix common issues. If you still need help, contact Provident Metals Customer Service.

About Two-Factor Authentication

What is two-factor authentication (2FA)?

2FA is an extra security step when you sign in. In addition to your password, you confirm your identity a second way — with a passkey or a one-time code sent by text. That way, even if someone learns your password, they still can't get into your account.

Do I have to use 2FA?

No — 2FA is optional. You can turn it on for extra protection, and you can skip it during account setup and turn it on later from My Account. We do recommend it, especially for accounts that place orders.

What methods can I use?

Two methods are available:

•     Passkey — sign in with your device's Face ID, fingerprint, or PIN. It's the fastest and most secure option.

•     Text message (SMS) — we text a 6-digit code to your phone that you enter to sign in.

What is a passkey?

A passkey lets you sign in using your device's built-in security (like Face ID, Touch ID, or a device PIN) instead of typing a code. It's tied to your device, can't be phished, and there's nothing to remember or type. 

Which method should I choose?

If your device supports passkeys, we recommend Passkey — it's the quickest and most secure. Choose Text message (SMS) if you'd rather receive a code by text or your device doesn't support passkeys. You can also set up both, so you always have a backup.

Will Provident Metals ever ask me for my code?

No. We will never ask for your one-time code, and we'll never ask you to read it to us by phone, email, or chat. Your codes expire quickly and are for your use only. If anyone asks you for a code, do not share it.

Setting Up 2FA

How do I set up 2FA?

You can set it up two ways:

•     During registration — when you create your account, you'll be offered the option to secure it with a passkey or text message.

•     Any time from My Account — open the Two-Factor Authentication section and choose a method to set up.

What are recovery codes, and why do I need them?

When you first set up 2FA, you'll get 10 one-time recovery codes. If you ever can't use your normal method — for example, you lose your phone — you can use a recovery code to sign in. Each code works only once.

Where should I keep my recovery codes?

Save them somewhere safe that isn't your phone alone — for example, a password manager, or a printout kept in a secure place. You can Copy, Download, or Print them from the setup screen. This is the only time the full list is shown, so save them before you continue.

Can I use both a passkey and SMS?

Yes, and we recommend it. If you set up one method, you'll be offered the chance to add the other as a backup. Having two methods means you can still get in if one isn't available.

Can I set it up later?

Yes. Choose “Skip for Now” during registration and your account is still created. You can turn on 2FA whenever you like from My Account.

Signing In

How do I sign in when 2FA is on?

Enter your email and password as usual. If 2FA is on, you'll then see a “Verify It's You” prompt — choose your passkey or a texted code and complete that one step to finish signing in.

I have two methods set up — do I need to complete both?

No. If you have both a passkey and SMS, you only need to complete one of them to sign in. Pick whichever is easiest at the moment.

Do I have to do 2FA every time I sign in?

Yes — for your security, you'll complete your second factor each time you sign in.

What if I can't complete my 2FA at sign-in?

If a method doesn't work, try again or switch to your other method. If neither works, choose “Use a Recovery Code” on the error screen and enter one of the codes you saved when you set up 2FA.

Managing Your 2FA (My Account)

How do I add another method?

Open the Two-Factor Authentication section in My Account and choose to set up the additional method. If you already have 2FA, you'll be asked to confirm your password and complete an existing method first.

How do I change my phone number for SMS?

In My Account, choose Change Number. For your security you'll confirm your password and complete a text code to your current number before setting the new one. If you no longer have access to your current number, contact Customer Service.

How do I remove a method?

In My Account, choose Remove next to the method. You'll confirm your password and complete that method before it's removed. If you can't complete it, contact Customer Service.

Why am I asked to verify again when I change my 2FA settings?

Changing security settings is sensitive, so we ask you to confirm it's really you before making changes to your account's 2FA.

How do I get a new set of recovery codes?

You can generate a new set from My Account. Generating new codes replaces your old ones — the previous codes stop working, so update your saved copy.

Troubleshooting

I didn't receive my text code.

Use the Resend option to send a new code. Codes can take a moment to arrive. If texts keep failing, try your passkey (if set up) or use a recovery code. Message and data rates may apply, and there's a limit on how many codes can be sent in a short time.

My code says it's wrong or expired.

Codes expire after about 10 minutes and can only be used once. Request a fresh code with Resend and enter the newest one. Double-check the digits.

I'm getting a message that I've tried too many times.

For security, entry is paused briefly after several wrong attempts. Wait a short while, request a new code, and try again — or use a different method or a recovery code.

My passkey won't verify.

Make sure you're on a device where your passkey is saved and try again. On the error you can choose Try Again, switch to text message, or use a recovery code.

I'm signing in on a new device.

If your passkey isn't on the new device, verify by text message instead. Once you're signed in, you can set up a passkey on the new device from My Account.

I lost my phone.

If you have a passkey on another device, sign in with that. Otherwise, use a recovery code to sign in, then update your 2FA in My Account (for example, change your phone number or remove the old method). If you can't get in, contact Customer Service.

I've run out of recovery codes.

If you can still sign in, generate a new set from My Account right away. If you've used all your codes and can't complete any method, contact Customer Service to regain access.

I forgot my password.

Use “Forgot Password?” on the sign-in screen. Resetting your password does not turn off 2FA — you'll still complete your second factor after resetting.

I got an email about a 2FA change I didn't make.

If you receive a 2FA confirmation or removal email you didn't expect, contact Customer Service right away so we can help secure your account.

A method I wanted isn't available to set up.

Occasionally a method may be temporarily unavailable for new setup. If a method you already use is affected, you can keep using it; if you're trying to add it and can't, choose the other method or check back later.

Scenario 1: My passkey is on my phone and I’m signing in on my computer. 

Open your phone’s camera and scan the QR code. Then confirm with Face ID, fingerprint or PIN. Make sure Bluetooth is on on both devices and the phone is nearby.

Scenario 2: My passkey is on my computer and I’m signing in on my phone. 

Close the QR prompt (tap Cancel or Close) and choose Text message to get a code. Once you’re signed in, add a passkey on your phone from My Account.

Security & Privacy

Is my information safe?

Yes. Your passkey stays on your device and is never shared with us, and we will never ask you for a one-time code. Recovery codes are shown only to you and each works once.

Will I be charged for the text messages?

Standard message and data rates from your carrier may apply. When you set up SMS you agree to receive automated security texts; you can reply STOP to unsubscribe (which will turn off SMS as a 2FA method).

Still Need Help?

If you're locked out or something isn't working, contact Provident Metals Customer Service and we'll help verify your identity and get you back into your account.