update docs

docs/thijooree/faq/totpseed/01-setup-bml.md

@@ -5,6 +5,9 @@ Reset your Bank of Maldives authenticator to get a new OTP seed, then add that s
 > [!NOTE]
 > You need the BML app signed in, and a BML debit card with its expiry date and CVC to confirm who you are.
 
+> [!IMPORTANT]
+> Want the same codes in another authenticator app too, such as Microsoft Authenticator or Google Authenticator? Add the secret key to that app **after step 5 and before step 7**. After you tap **Verify Code**, BML stops showing the secret key and you would have to reset again. See [Export from Microsoft Authenticator](04-export-microsoft.md) for the steps.
+
 <table>
   <tr>
     <th width="25%">Step 1</th>
@@ -55,7 +58,8 @@ Reset your Bank of Maldives authenticator to get a new OTP seed, then add that s
     </td>
     <td valign="top">
       <b>Add the seed to Thijooree</b><br>
-      Open Thijooree and paste the key into <b>OTP Seed (TOTP Secret)</b>. Tap the <b>Current OTP</b> box to copy the 6-digit code.
+      Open Thijooree and paste the key into <b>OTP Seed (TOTP Secret)</b>. Tap the <b>Current OTP</b> box to copy the 6-digit code.<br><br>
+      <i>Adding the key to another authenticator app? Do it now, before step 7.</i>
     </td>
     <td valign="top">
       <b>Verify the code in BML</b><br>
@@ -68,6 +72,14 @@ Reset your Bank of Maldives authenticator to get a new OTP seed, then add that s
   </tr>
 </table>
 
+## Log in to Thijooree
+
+Once BML shows **Authenticator reset successfully**, go back to Thijooree:
+
+1. Enter your BML **Username** and **Password**.
+2. Check that **OTP Seed (TOTP Secret)** still has the key you pasted in step 6.
+3. Tap **Login**.
+
 > [!TIP]
 > The OTP changes every 30 seconds. If BML rejects the code, copy the current one from Thijooree again and verify straight away.
 

docs/thijooree/faq/totpseed/04-export-microsoft.md

@@ -1,8 +1,62 @@
 # Export from Microsoft Authenticator
 
-Microsoft Authenticator does not allow exporting TOTP seeds without root access.
+Microsoft Authenticator can't export TOTP seeds unless your phone is rooted, so you can't move an existing seed out of it.
 
-Instead, reset your OTP seed with your bank and set it up in Thijooree directly:
+Instead, reset your OTP seed with your bank to get a new secret key. Add that key to Thijooree, and to Microsoft Authenticator too if you want codes in both apps.
 
-- [Set up BML](01-setup-bml.md)
-- [Set up MIB](02-setup-mib.md)
+> [!IMPORTANT]
+> Resetting replaces the old seed. The existing BML entry in Microsoft Authenticator stops working, so you have to add the new key to it again.
+
+## How to do it
+
+1. Follow [Set up BML](01-setup-bml.md) up to **step 5**, where you copy the secret key.
+2. Add the key to Microsoft Authenticator using the steps below.
+3. Go back to [Set up BML](01-setup-bml.md) and continue from **step 6**.
+
+> [!WARNING]
+> Add the key to Microsoft Authenticator **before step 7** (Verify Code). After you verify, BML stops showing the secret key and you would have to reset again.
+
+## Add the key to Microsoft Authenticator
+
+<table>
+  <tr>
+    <th width="20%">Step 1</th>
+    <th width="20%">Step 2</th>
+    <th width="20%">Step 3</th>
+    <th width="20%">Step 4</th>
+    <th width="20%">Done</th>
+  </tr>
+  <tr>
+    <td align="center"><img src="screenshots/msauth_1.jpg" alt="Microsoft Authenticator home screen with the QR code button highlighted" width="160"></td>
+    <td align="center"><img src="screenshots/msauth_2.jpg" alt="Scan QR Code screen with the Enter code manually button highlighted" width="160"></td>
+    <td align="center"><img src="screenshots/msauth_3.jpg" alt="Add account screen with Other account highlighted" width="160"></td>
+    <td align="center"><img src="screenshots/msauth_4.jpg" alt="Add account form with account name and secret key filled in" width="160"></td>
+    <td align="center"><img src="screenshots/msauth_5.jpg" alt="Bank of Maldives account in the Microsoft Authenticator list showing a 6-digit code" width="160"></td>
+  </tr>
+  <tr>
+    <td valign="top">
+      <b>Add an account</b><br>
+      Open Microsoft Authenticator and tap the <b>QR code button</b> in the bottom-right corner.
+    </td>
+    <td valign="top">
+      <b>Enter the code manually</b><br>
+      BML is on the same phone, so there is nothing to scan. Tap <b>Enter code manually</b>.
+    </td>
+    <td valign="top">
+      <b>Choose the account type</b><br>
+      Tap <b>Other account (Google, Facebook, etc.)</b>.
+    </td>
+    <td valign="top">
+      <b>Paste the secret key</b><br>
+      Enter an <b>Account Name</b> such as <i>Bank of Maldives</i>, paste the key from BML into <b>Secret Key</b> and tap <b>Finish</b>.
+    </td>
+    <td valign="top">
+      <b>Account added</b><br>
+      The account now shows a 6-digit code. It matches the code in Thijooree because both use the same key.
+    </td>
+  </tr>
+</table>
+
+Now go back to [Set up BML](01-setup-bml.md) and continue from **step 6**. In step 7 you can verify with the code from either Thijooree or Microsoft Authenticator.
+
+For MIB, see [Set up MIB](02-setup-mib.md).