2FA and passkeys

Your account holds your customers, your turnover and your bank account. So add a second layer of protection on top of your password. You set it up under Settings → Security.

Two-factor authentication

With two-factor authentication (2FA) we ask for a 6-digit code from an authenticator app when you sign in, in addition to your password.

1. Under Two-factor authentication, click Turn on and confirm with your password.
2. Install an authenticator app, like Google Authenticator, Microsoft Authenticator, 1Password or Bitwarden.
3. Scan the QR code with the app. Can't scan? Enter the key manually.
4. Enter the 6-digit code and click Verify and turn on.
5. Save your backup codes (see below).

Backup codes

After turning it on you get 10 backup codes. If you lose your phone, you sign in with one of these codes. Each code works once. You only see them once: download them or copy them into your password manager.

Codes used up or lost? Choose New backup codes. The old ones stop working.

Code by email

Don't have your phone at hand? When signing in you can also have a code sent by email. That code is valid for 5 minutes.

Turning it off

Choose Turn off and confirm with your password. Your account is then protected by your password only.

Passkeys

With a passkey you sign in with your fingerprint, face or your device's screen lock. No password, and phishing doesn't work.

1. Under Passkeys, click Add passkey.
2. Give it a name, like "MacBook" or "iPhone".
3. Confirm on your device.

On the sign-in page you then choose to sign in with a passkey. A passkey synced through iCloud Keychain, Google Password Manager or your password manager works on all your devices. You can rename and delete passkeys.

Too many wrong codes

To prevent guessing you can try up to 5 codes a minute and request 3 email codes a minute. If you hit that, wait a moment and try again.