Skip to main content

Secure your sign-in

Add two-factor authentication from the Security page: an authenticator app, recovery codes, and passkeys are all supported.

Every user manages their own sign-in security. Open the account menu, then Security. The Security Settings page has three cards.

Authenticator app (TOTP). Click Set up authenticator app and scan the code with an app like Google Authenticator or Authy. From then on, sign-in asks for your password and a 6-digit code.

Recovery codes. After the authenticator is set up, click Generate recovery codes. You get 10 one-time codes that let you in if you lose your phone. Store them somewhere safe. Later you can click View recovery codes or Regenerate.

Passkeys. Click Manage passkeys to register a hardware security key or your device's biometrics (Face ID, Touch ID) as a sign-in method.

Two-factor is optional for regular users. A few related basics:

  • Forgot password? on the login page sends a reset link by email.
  • My Profile holds your first and last name. Keep it accurate: your typed full name is how you sign trained-individual calibration reviews.
  • Signing in with Google is not available. If you linked a Google account before, you can remove it: on My Profile, click Manage connected accounts (Google), pick the account, and click Disconnect selected.
  • You stay signed in for 24 hours. After that, sign in again.
Security Settings page Security Settings with three cards: Authenticator App (TOTP) marked Active with a Remove authenticator app button, Recovery Codes marked Not generated with a Generate recovery codes button, and Passkeys / Security Keys (WebAuthn) marked Not set up with a Manage passkeys button. Security Settings Authenticator App (TOTP) Active An authenticator app is configured for two-factor authentication. Remove authenticator app Recovery Codes Not generated Generate backup codes to use if you lose your authenticator app. Generate recovery codes Passkeys / Security Keys (WebAuthn) Not set up Use a hardware security key or device biometrics (Face ID, Touch ID) to sign in. Manage passkeys ← Back to My Profile
Security Settings after the authenticator app is set up: generate recovery codes next.
Generate recovery codes right away

If you turn on the authenticator app and lose the phone before generating recovery codes, you have no second factor left to sign in with. Do both steps in the same sitting.

Related