Use a code from an app on your phone instead of an emailed code when you sign in with your password.

Overview

An authenticator app, such as Google Authenticator, Microsoft Authenticator or 1Password, makes a new six digit code every 30 seconds. Once you add one, signing in with your password asks for its code instead of emailing one. You also get eight recovery codes, each of which signs you in once if you lose your phone.

Requirements

• Your own TekStacks user. Every role can add one.

Step 1: Add the app

1. Click your name at the top right, then Profile and security.
2. Under Authenticator app, click Add an authenticator app.
3. Confirm your password (or use a passkey) when asked.
4. Scan the QR code with your app, or type the Setup key into it.
5. Enter the six digit code the app shows in Code from your app and click Confirm and turn on.

Step 2: Save your recovery codes

TekStacks shows eight recovery codes once, right after you turn the app on.

1. Click Print or Download .txt, or copy them into your password manager.
2. Tick I have saved these recovery codes in a safe place.
3. Click Done, hide these codes.

Note: Recovery codes are shown only once. If you lose them, click Make new recovery codes: the old ones stop working at once.

Signing in with the app

After your password, Confirm it is you asks for the six digit code from your authenticator app. If you cannot use the app, enter a recovery code in the same box. Each recovery code works once, and you are emailed when one is used.

Turning it off

Under Authenticator app, click Turn off and confirm your password. Every other session is signed out, and sign in codes come by email again.

Notes

Note: Every change here asks for your password first (or a passkey), and you are emailed about it. You are not asked again for a few hours.

Troubleshooting

"That code is not valid. Please try again." Check that your phone's clock is set automatically. The code changes every 30 seconds, so enter the current one.

"The setup has expired. Please start again." Click Add an authenticator app again and scan the new QR code.

I lost my phone and my recovery codes. Ask an Admin in your company to use Reset sign in on your user under Users. That removes your authenticator app and passkeys and signs you out; you then sign in with your password and an emailed code.

FAQ

Can I use the app and a passkey together? Yes. A passkey sign in needs no code at all; the app is used when you sign in with your password.