Menu List

<
Account
Creating a RICOH360 Account
Log in
Log In with Single Sign-On (SSO)

How to Set Up Two-Factor Authentication(2FA) and Log In

Necessary preparations

What Is Two-Factor Authentication (2FA)?

Two-factor authentication (2FA) is an authentication method that verifies a user's identity by combining two different types of authentication factors.

RICOH360 supports authentication using an authenticator app (TOTP), in addition to email and password authentication.

When two-factor authentication is enabled, you will be required to enter the verification code displayed in your authenticator app in addition to your email address and password when logging in.

RICOH360 offers two-factor authentication to help prevent unauthorized access to your account.


Important

  • If a team administrator makes two-factor authentication (2FA) mandatory for a team, the requirement takes effect immediately. There is no grace period.
  • Two-factor authentication (2FA) can only be configured via the web app. It cannot be configured via the mobile app.
  • Users who have not configured two-factor authentication (2FA) are subject to feature restrictions.
    • Web app: Only logging in, changing account settings, and configuring two-factor authentication (2FA) are available.
    • Mobile app: Only features that do not use the Cloud, such as taking photos with THETA, are available. Cloud-related features are not available.
  • If you are unable to use your authenticator app due to a smartphone malfunction, loss, or device change, you may need your recovery codes to log in.
    Please keep your recovery codes in a safe place.


Prerequisites

To use time-based one-time passwords (TOTP) for two-factor authentication in RICOH360, you must install a TOTP-compatible authenticator app on your smartphone.

Examples of TOTP authenticator apps:

  • Microsoft Authenticator
  • Google Authenticator
  • Authy

*As of October 2026

The apps listed above are examples only. You can use any authenticator app that supports TOTP and complies with RFC 6238 by generating verification codes using the HMAC-SHA1 method.


Enable Two-Factor Authentication

  1. Log in.
  2. Click your username in the upper-right corner of the screen.
  3. Click [Security].
  4. Click [Enable] next to the Two-Factor Authentication (2FA) section.
  5. Enter your account password in the "Current Password" field, then click [Next].
  6. Open the authenticator app on your smartphone and scan the displayed QR code to register your account.
    If you cannot scan the QR code, copy the setup key and enter it manually in your authenticator app.
  7. Enter the 6-digit verification code displayed in the authenticator app, then click [Confirm].
  8. A dialog box titled "Authenticator App (TOTP) has been enabled" will appear. Copy or download your recovery codes and save them in a safe place.

Select the "Recovery codes have been saved" checkbox, then click [Done].  

Two-factor authentication (2FA) is now enabled.


Important

You may need your recovery codes to access your account if your smartphone malfunctions, is lost, or is replaced.

  • Ten recovery codes are generated when two-factor authentication is enabled.
  • Each recovery code can be used only once.  new recovery codes are generated, all previously issued recovery codes become invalid.
  • Recovery codes are displayed only on this screen and cannot be viewed again after the screen is closed.

Be sure to copy or download your recovery codes and store them in a safe place.


Log In with Two-Factor Authentication

  1. Open the login screen: https://app2.ricoh360.com/login
  2. Enter your email address and click [Next].
  3. Enter your password and click [Log In].
  4. Open the authenticator app on your smartphone, enter the 6-digit verification code displayed in the app, and click [Confirm].  


Frequently Asked Questions (FAQ)

Q. If I make two-factor authentication (2FA) mandatory for my team, is there a grace period for setting it up?

A. No.

If a team administrator makes two-factor authentication (2FA) mandatory for a team, the requirement takes effect immediately.

There is no grace period. Members of that team must set up two-factor authentication (2FA).


Q. If two-factor authentication (2FA) is made mandatory for a team, what restrictions apply to users who have not configured it?

A. Users who have not configured two-factor authentication (2FA) are subject to feature restrictions.

Web app

Only the following functions are available:

  • Logging in
  • Changing account settings
  • Setting up two-factor authentication (2FA)

Mobile app

Only features that do not use the Cloud, such as taking photos with THETA, are available.

The following cloud-related features are not available:

  • List view on the "Cloud" tab
  • Upload to RICOH360 Cloud
  • Connect Camera to Cloud
  • Delete a THETA linked to the cloud
  • Cloud Sync Configuration
  • Automatic upload settings

These restrictions are removed once two-factor authentication (2FA) has been configured.


Q. What should I do if I lose my smartphone?

A. If you cannot use your authenticator app, use one of your recovery codes to log in.

  • Each recovery code can be used only once.
  • If new recovery codes have been generated, previously issued recovery codes can no longer be used.

If you do not have any valid recovery codes, contact RICOH360 Support.


Q. What should I do if I am switching to a new smartphone?

A. Please transfer your authenticator app to your new smartphone before changing devices.

If you reset your old device without transferring the authenticator app, you may be unable to log in.

If the transfer fails, use the recovery codes you saved to log in.  


Q. What should I do if the verification code is incorrect?

A. Please check the following:

  • Your smartphone's date and time settings are set to automatic.
  • You are entering the latest verification code displayed in your authenticator app.
  • The verification code has not expired.
  • You are using the correct authenticator app.  


Q. Which authenticator apps can I use for two-factor authentication (2FA)?

A. You can use any authenticator app that complies with RFC 6238 and generates verification codes using the HMAC-SHA1 method.

Examples of authenticator apps:

  • Microsoft Authenticator
  • Google Authenticator
  • Authy

The apps listed above are examples only. You can use any authenticator app that supports TOTP.


Q. What should I do if I cannot scan the QR code?

A. Use the setup key displayed on the screen to register your account manually in your authenticator app.

Supplementary Information