Two-factor sign-in
Updated
On this page
Two-factor sign-in asks for a second step, besides your password, every time you sign in, so a leaked password is not enough. You can turn on as many methods as you like; the sign-in page offers whichever you have set up.
Open Account settings → Security and find Two-factor authentication.
The methods
| Method | What you do at sign-in |
|---|---|
| Authenticator app | Enter the six-digit code from an app such as 1Password, Authy or Google Authenticator. |
| Email codes | Ask for a one-time code and enter it. It is sent to your account's e-mail address. Needs outgoing e-mail, so on a self-hosted install set up Email first. |
| Passkeys | Confirm with your fingerprint, face, screen lock or a security key. You can add as many as you like, one per device or key. |
Set up an authenticator app
- Choose Set up next to Authenticator app.
- Scan the QR code with your app. If you cannot scan it, enter the key shown instead, or choose Open in an authenticator app on a phone.
- Enter the six-digit code the app shows and choose Confirm and turn on.
Turn on email codes
Choose Turn on next to Email codes. Tidemark sends a code to your address; enter it and choose Confirm and turn on. If the button is greyed out, this installation cannot send e-mail yet.
Add a passkey
Choose Add a passkey, give it a name so you can tell your passkeys apart (for example MacBook or YubiKey), and confirm on your device when it asks. If the button is missing, your browser does not support passkeys. A passkey belongs to the address you added it on, so add them again if you move the install to another domain.
Recovery codes
When you turn on your first method, Tidemark shows ten recovery codes once. Save them somewhere safe, such as a password manager. Each code works once, and at sign-in you can choose Use a recovery code if you cannot reach any other method.
Security shows how many are left. To get a fresh set, choose Make new codes and confirm your password; the new codes replace the old ones, which stop working.
Turn a method off
Choose Remove (or Turn off) next to it and confirm your password. Turning off the last method turns two-factor off.
Caution:
Keep a way back in. If you lose every method and your recovery codes, and there is no other administrator, you will need database access to recover.
Related: Account security.
Was this helpful?
Ready to try Tidemark?
Free plan, no credit card. No cookies, no footprints.