Two-factor authentication and passkeys

Both live on your account page: click your name at the bottom of the menu.

Two-factor authentication

• On the Two-factor authentication card, press Turn on.
• Scan the QR code with an authenticator app (or enter the key by hand).
• Type the code from the app and press Confirm.
• Save the recovery codes somewhere safe. Generate new codes replaces them.

From then on, signing in asks for a code from your app. Lost your phone? Choose "Lost your device? Use a recovery code" on the code screen.

Passkeys

• On the Passkeys card, give the passkey a name (it suggests one for your device) and press Add a passkey.
• Your browser asks you to confirm with Face ID, Touch ID, Windows Hello, your phone or a security key.
• On the sign-in page, press Sign in with a passkey. Your browser may also offer the passkey in the email field.

Each passkey shows when it was added and last used, and can be removed. Add one per device you use.

Good to know

• Turning two-factor on or off, and adding or removing passkeys, asks for your password first. That confirmation lasts a few hours.
• Passkeys need a secure (https) connection. A browser that cannot make one says so.
• Settings → Security shows whether two-factor is on.