In recent years, phishing attacks have become more common due to increases in employees working remotely in companies throughout the US. Phishing attacks can take the form of malicious links in emails sent to employees that, once clicked, install malicious software on a company device. Or, more recently, fraudsters have started directing users to spoofed websites by emailing them links or paying for ads in search engines to try and steal credentials from unsuspecting employees so that they can access sensitive data or systems.

To help protect against these types of phishing and other forms of attacks, Divvy has built out a device verification flow that utilizes 3-factor authentication (3FA).

Verify a New Device or Browser in Divvy on the Web:

1. After logging in and passing MFA, you will be presented with the following page that asks you to check your email and verify your device.

Note: Make sure you are using the same device and browser to check your email that you just attempted to log in with and that you open your email within 15 minutes.

2. To confirm the device you are currently using, open the verification email and click the Verify Device button.

3. If your device is successfully verified, you will see a Remember this device page.

Click the Remember Device button if the device you are using is a private device or the One-time Login button if the device you are using is public or only being used this one time.

Note: Selecting the Remember Device option will make it so you do not get challenged again for up to one year. Please note that new browsers, computer updates, or clearing cache and cookies can affect this status, prompting you to verify your device again.

Verify a New Device or Browser in the Divvy Mobile App

Note: You will only see the verify device flow on mobile if you are logged out or have a new device to verify. If you have PIN and biometric-based authentication already set up, you will not be prompted to verify your device.

1. After logging in and passing MFA, you will be presented with the following screen that asks you to check your email and verify your device.

Note: Make sure you are using the same device and browser to check your email that you just attempted to log in with and that you open your email within 15 minutes.

2. To confirm the mobile device you are currently using, click the verification email and click the Verify Device button.

Note: You will need to open the verification email from your mobile device’s email app. Once the Verify Device button is clicked, you will be redirected back into the Divvy mobile app.

3. If your device is successfully verified, you will see a page to set up a PIN or biometric authentication for the app. You will not need to MFA or verify your device again unless you log out or the token expires for your session.

FAQs

I am not receiving device verification emails. What can I do?

If you are not receiving device verification emails, please try the following:

  • Make sure you are using Google Chrome if logging in on the web

  • Talk to your Divvy admin and make sure you are logging into your account with the correct username

  • Check Spam and Trash in your email inbox to make sure the message titled “Verify this device” from Divvy isn’t being filtered

  • Clear your cache and cookies and try logging in again

  • Check with your IT team to make sure they are not blocking emails from [email protected] or emails with the Divvy domain

If these steps do not resolve the problem, please reach out to Support.

I am seeing an error when I click the Verify Device button in the verification email. It says “Your link has expired or has been redeemed”. What does this mean?

This error means either:

  1. The Verify Your Device email is over 15 minutes old and is now expired. You will need to try logging in again to get a new email.

  2. The Verify Your Device email has already been redeemed and is no longer valid. If you keep seeing this error try clearing your cache and cookies and logging in again to get a new email.

I am seeing an error when I click the Verify Device button in the verification email. It says “Verification failed”. What does this mean?

This means you did not use the same device and browser to verify your device. Please try logging in again on a non-incognito window while using the same device and browser.

I am seeing an error when I click the Verify Device button in the verification email. It says “Something went wrong”. What does this mean?

This error means something went wrong trying to verify your device. Please try logging in again on a non-incognito window.

How often will I need to verify my devices?

In most cases, you will only need to verify a new device once per year. However, if you get a new device, clear your browser’s cache and cookies, or use an incognito window, you may have to verify your device again.

Is device verification required on all Divvy accounts?

Yes, in order to protect your account from unauthorized access.

As always, please let us know if you have any questions.

Did this answer your question?