# Set up BML

Reset your Bank of Maldives authenticator to get a new OTP seed, then add that seed to Thijooree so it can generate your OTP codes.

> [!NOTE]
> You need the BML app signed in, and a BML debit card with its expiry date and CVC to confirm who you are.

> [!IMPORTANT]
> Want the same codes in another authenticator app too, such as Microsoft Authenticator or Google Authenticator? Add the secret key to that app **after step 5 and before step 7**. After you tap **Verify Code**, BML stops showing the secret key and you would have to reset again. See [Export from Microsoft Authenticator](04-export-microsoft.md) for the steps.

<table>
  <tr>
    <th width="25%">Step 1</th>
    <th width="25%">Step 2</th>
    <th width="25%">Step 3</th>
    <th width="25%">Step 4</th>
  </tr>
  <tr>
    <td align="center"><img src="screenshots/bml_1.jpg" alt="BML app wallet screen with the profile icon highlighted" width="200"></td>
    <td align="center"><img src="screenshots/bml_2.jpg" alt="Profile menu with Authenticator Setup highlighted" width="200"></td>
    <td align="center"><img src="screenshots/bml_3.jpg" alt="Channel Settings screen with the Reset Authenticator button highlighted" width="200"></td>
    <td align="center"><img src="screenshots/bml_4.jpg" alt="Debit card verification form with the Authorize button highlighted" width="200"></td>
  </tr>
  <tr>
    <td valign="top">
      <b>Open your profile</b><br>
      In the BML app, tap the <b>profile icon</b> in the top-right corner of the Wallet screen.
    </td>
    <td valign="top">
      <b>Open Authenticator Setup</b><br>
      In the menu, under <b>Settings</b>, tap <b>Authenticator Setup</b>.
    </td>
    <td valign="top">
      <b>Reset the authenticator</b><br>
      On the <b>Security</b> tab, tap <b>Reset Authenticator</b>. This replaces any authenticator app you used before.
    </td>
    <td valign="top">
      <b>Verify your debit card</b><br>
      Pick a debit card, enter its expiry month, expiry year and CVC, then tap <b>Authorize</b>.
    </td>
  </tr>
  <tr>
    <th>Step 5</th>
    <th>Step 6</th>
    <th>Step 7</th>
    <th>Done</th>
  </tr>
  <tr>
    <td align="center"><img src="screenshots/bml_5.jpg" alt="QR code screen with the copy button next to the secret key highlighted" width="200"></td>
    <td align="center"><img src="screenshots/thijooree_1.jpg" alt="Thijooree sign-in screen with the OTP seed filled in and the current OTP shown" width="200"></td>
    <td align="center"><img src="screenshots/bml_6.jpg" alt="BML screen with the OTP entered and the Verify Code button highlighted" width="200"></td>
    <td align="center"><img src="screenshots/bml_7.jpg" alt="Authenticator reset successfully message" width="200"></td>
  </tr>
  <tr>
    <td valign="top">
      <b>Copy the secret key</b><br>
      Below the QR code, tap the <b>copy button</b> next to the secret key. Keep this screen open, you will come back to it.
    </td>
    <td valign="top">
      <b>Add the seed to Thijooree</b><br>
      Open Thijooree and paste the key into <b>OTP Seed (TOTP Secret)</b>. Tap the <b>Current OTP</b> box to copy the 6-digit code.<br><br>
      <i>Adding the key to another authenticator app? Do it now, before step 7.</i>
    </td>
    <td valign="top">
      <b>Verify the code in BML</b><br>
      Go back to the BML app, paste the code into the 6-digit code field and tap <b>Verify Code</b>.
    </td>
    <td valign="top">
      <b>All done</b><br>
      BML shows <b>Authenticator reset successfully</b>. Thijooree now generates your BML OTP codes.
    </td>
  </tr>
</table>

## Log in to Thijooree

Once BML shows **Authenticator reset successfully**, go back to Thijooree:

1. Enter your BML **Username** and **Password**.
2. Check that **OTP Seed (TOTP Secret)** still has the key you pasted in step 6.
3. Tap **Login**.

> [!TIP]
> The OTP changes every 30 seconds. If BML rejects the code, copy the current one from Thijooree again and verify straight away.

> [!WARNING]
> The secret key gives full access to your OTP codes. Don't share it or screenshot it where others can see it.