Tori 2FA: how to set up an authenticator app for your Vend account

You won't find a two-factor setting on tori.fi itself. Tori, the Finnish marketplace for used goods, signs you in with a Vend account (Vend-tili), the same login as Oikotie and other Vend marketplaces such as FINN and Blocket (Tori). The setting lives there, at account.vend.fi.

Two-factor authentication is optional, but Tori recommends it. The second step can be a code from an authenticator app, a text message, or both (Tori). It comes on top of Tori's passwordless sign-in, where a one-time code emailed to you replaces the old password (Tori). This guide uses Authenticator App - Novaz on iPhone, but any authenticator app works the same way.

How we checked this guide: the Tori steps come from Tori's own help center, Vend's account FAQ, and the text of the Vend account's authentication screens, linked below, which we read on October 20, 2026. The account pages come in Finnish and English, so we give the Finnish label first and the English one in parentheses. We haven't tested the steps on a Tori account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Turn on 2FA with an authenticator app

Tori's help links straight to account.vend.fi/mfa (Tori). The labels below come from that page (Vend):

1. Sign in at account.vend.fi with the email address you use on Tori.
2. Under Turvallisuus ja yksityisyys (Security and privacy), open Todentamisen tavat (Authentication methods).
3. Next to Todennussovellus (Authentication app), choose Ota käyttöön (Activate).
4. Ota sovellus käyttöön (Set up your app) suggests Google Authenticator, but any authenticator app works.
5. On Lue QR-koodi (Scan the QR code), open Novaz, tap +, then Scan QR code, and point the camera at the code. If the code is on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
6. Can't scan it? Choose Eikö koodin lukeminen onnistu? (Can't scan the code?). Vend then shows a secret setup code with a Kopioi koodi (Click to copy) button. In Novaz, tap +, then Enter key manually, and paste it as the Setup key. See What is a 2FA setup key?
7. On Kirjoita koodi (Enter code), type the current code from Novaz.
8. The screen Todennussovellus on otettu käyttöön confirms the app is active. Vend also emails you a confirmation (Vend).

Vend doesn't say how many digits its codes have or how often they change, so scan the QR code if you can: it passes those settings to your app, while a typed key gets 6 digits every 30 seconds.

Then check the switch on Todentamisen tavat. It should read Kaksivaiheinen todennus on käytössä (Two-factor authentication is ON), which per the screen text means a code at every sign-in. With the switch off but a method still active, Vend asks only now and then. If it's off, choose Ota käyttöön (Turn ON). The confirmation screen still mentions a password, but sign-in is now your emailed code plus the app code (Vend).

Not the same as strong identification

Tori also offers strong identification (vahva tunnistautuminen) with online bank credentials or a mobile certificate. It proves who you are to other traders and adds a Tunnistettu henkilö badge to your profile (Tori). It gives you no sign-in code, so it doesn't replace the authenticator app.

No backup codes

Neither Tori's help nor Vend's FAQ mentions backup or recovery codes. The only documented fallback is the other method: you can turn on Tekstiviestikoodi (SMS code) on the same page and keep both active (Tori). If that phone is gone and you have no Novaz iCloud backup or backup file, SMS is your way back in. See authenticator app vs. SMS.

Keep your email working too. Every sign-in starts with a code sent there, and Vend says to contact customer support at once if you lose that address (Vend).

If Tori rejects your code

Vend's help doesn't cover rejected app codes. First make sure you typed the Novaz code, not the emailed one. Then check your iPhone's clock: Settings > General > Date & Time > Set Automatically. Novaz also warns you when the clock is 15 seconds or more off.

During setup, Vend's screen says too many wrong codes make you wait 15 minutes (Vend). More fixes are in Authenticator code not working?

Changing phones

To switch apps, Vend says to turn the authenticator method off and on again with the new one (Vend). Do it while you still have the old phone. On Todentamisen tavat, choose Poista käytöstä (Deactivate) next to Todennussovellus, then Ota käyttöön and scan the new QR code with the new iPhone. If you have a Novaz iCloud backup or backup file, you can restore your accounts on the new iPhone instead. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

If you set up SMS too, use a text-message code. If not, Vend and Tori both say to contact Tori's customer support (Vend, Tori). You reach it through the chatbot on the front page of tuki.tori.fi (Tori). Neither page says what proof support asks for or how long it takes.

More in Lost the phone with your authenticator app?

Turning 2FA off

On Todentamisen tavat, you can remove one method or all of them (Vend). Choose Poista käytöstä next to the method. Removing SMS asks for your emailed code and a text-message code. Vend recommends keeping at least one method. Then open the Tori entry in Novaz and tap Remove account.

Official Tori help

• Käyttäjätilin turvaaminen ja kaksivaiheinen tunnistautuminen (Securing your account and two-factor authentication)
• Salasanaton kirjautuminen tai ongelmia kirjautumisessa (Passwordless sign-in or sign-in problems)
• Suojaa käyttäjätilisi Torissa (Protect your Tori account)
• Vend-tili ja Schibsted-tili: Tämä sinun tarvitsee tietää (Vend account and Schibsted account)
• Vahva tunnistautuminen Torissa (Strong identification on Tori)
• Usein kysytyt kysymykset Vend-tilistä (FAQ Vend)
• Todentamisen tavat (Authentication methods; sign-in required)