LinkedIn Access Handover
What Jonny and Adrian each do once, so we can run outreach on your LinkedIn through HeyReach without the account getting locked. About 5 minutes per account.
We run your LinkedIn outreach through HeyReach, used by 1,000+ B2B agencies for managed multi-account outreach. To stay logged in without LinkedIn locking the account every few days, we need three things from each account running campaigns. The two-factor (TFA) secret is the one piece we cannot regenerate, so Step 1 is about capturing it correctly.
One set of these three, per LinkedIn account we run outreach from. For Ripple that is two: Jonny and Adrian.
The LinkedIn login email
The LinkedIn password
The TFA (authenticator) secret key, captured in Step 1 below
The person whose account it is should run these steps themselves. About 5 minutes.
Sign in to the account at linkedin.com
Click Me at the top right, then Settings & Privacy
In the left menu, click Sign in & security
Find the row Two-step verification, then click Set up if it is off, or Change if SMS is the active method
Choose Authenticator app as the verification method, then Continue, and enter your password if asked
LinkedIn shows a QR code. Do not scan it yet
Below the QR code, click Can't scan QR code? Enter the code manually (the wording changes occasionally, look for the small text under the QR)
A 32-character key appears in groups of four, like ABCD EFGH IJKL MNOP QRST UVWX YZ23 4567.
Copy this string and save it somewhere safe. This is the one thing we cannot regenerate from your email and password
Keep the LinkedIn tab open so you can finish setup in 1D
Paste the secret into any authenticator app (Google Authenticator, Authy, Microsoft Authenticator). It generates a six-digit code
Enter that code back into LinkedIn to confirm. 2FA is now active
Save LinkedIn's backup recovery codes to your password manager too. We will not need them, but you might
Both options are encrypted end to end. Never send credentials in a plain email.
Create a LastPass entry titled [Your Name] LinkedIn (for example, Adrian LinkedIn)
Username = LinkedIn login email. Password = LinkedIn password
In the Notes field, paste one line: TFA: ABCD EFGH IJKL MNOP QRST UVWX YZ23 4567 (with the real secret)
Share the entry with team@dopaminedigital.io (Filip receives it)
Jonny and Adrian each create their own entry
Go to onetimesecret.com
Paste the email, password, and TFA secret. Set a passphrase if you want a second layer
Send the generated link (and passphrase, if set) to team@dopaminedigital.io
Within one business day, Filip imports the account into HeyReach with the TFA secret bound. No further input from your side
HeyReach validates the connection, syncs your existing connections, and runs a 24 to 48 hour warmup where activity is intentionally low
Once warmup completes, outreach goes live on the sequences your account team has approved
Weekly performance reports start the Monday after launch and appear in this portal
| You keep | How |
|---|---|
| Normal sign-in from any device | Add the TFA secret to your own authenticator at the same time you give it to us |
| Full visibility | See every active session at LinkedIn → Settings → Sign in & security → Where you're signed in. Sign ours out anytime |
| Full message history | Every conversation HeyReach starts appears in your normal LinkedIn inbox |
| Instant revocation | Change your LinkedIn password and our connection drops immediately |
| Commitment | Detail |
|---|---|
| Stored encrypted | Credentials live only in our LastPass shared vault, keys held by Jordan and Filip. Never in spreadsheets or email threads |
| SOC 2 platform | HeyReach is SOC 2 Type II certified and does not export your contacts or message history |
| No profile changes | We never touch your profile, photo, headline, or summary, and never message outside approved segments |
| Clean exit | If you cancel, we delete the credentials from LastPass and HeyReach within 24 hours and confirm in writing |
| Question | Answer |
|---|---|
| I already use SMS-based 2FA. Do I turn it off? | No. LinkedIn lets authenticator-app 2FA coexist with SMS. Adding the authenticator method is enough, and HeyReach uses the authenticator codes only. Keep SMS as your personal fallback. |
| Can I revoke access later? | Yes, instantly. Change your LinkedIn password and HeyReach is disconnected at the next login attempt. Tell your DD account team afterwards so we update the campaign list. |
| Why not use cookies or an API instead? | Cookie-based connections need manual re-authentication every few days, which kills campaign continuity, and LinkedIn offers no documented API for outbound automation. The TFA-secret approach is the standard, the most stable, and the only one we use across our client base. |
| I can't follow the technical steps. Can I get a walkthrough? | Yes. Reply to your DD account team and we will set up a 15-minute screen-share. The steps look intimidating in writing and take about 4 minutes live. |
| My LinkedIn screen looks different from this guide. | LinkedIn changes its layout often. Screenshot whatever you see and send it to team@dopaminedigital.io and we will point you to the right button. |
For setup questions or credential delivery, email team@dopaminedigital.io (Filip's inbox). If the LinkedIn UI looks different from these steps, screenshot it and send it across, we keep this page updated.