Two-step sign-in

After the code from email — also a code from an authenticator app on your phone: Google Authenticator, 1Password, Bitwarden and others. Even if someone gets the email with a code, they can't sign in without your phone. A passkey works instead of the code from the app.

Turn on

1. “Settings” → “Panel sign-in” → “Two-step sign-in” → “Turn on”.
2. Confirm it's you: a code from email or a passkey → “Next”.
3. Scan the QR code with the app. Doesn't scan — enter the key by hand.
4. Enter the 6 digits from the app → “Turn on”.

Signing in with a passkey doesn't ask for the second step.

The code doesn't match

The code changes every 30 seconds. Check that your phone sets its time automatically and enter a new code. The same code doesn't work twice. After 5 wrong codes, sign in again.

Turn off

“Settings” → “Panel sign-in” → “Two-step sign-in” → “Turn off”, and confirm it's you.

Lost your phone

Sign in with a passkey and turn two-step sign-in off. Without a passkey, only arcula can turn it off. So add a passkey as soon as you turn two-step sign-in on.

Require it from all members

The organization's owner: “Settings” → “Organization” → “Two-step sign-in” → the “Require from all members” checkbox. Turn on two-step sign-in for yourself or add a passkey first — otherwise the panel won't allow it.

A member without an app code and a passkey sees, after signing in, only the “… requires two-step sign-in” screen: the organization's servers and storages are closed to them until they add one of the two. They can switch to another organization of theirs and sign out.