Turn on two-step sign-in
Add a 6-digit code from an authenticator app on your phone.
What this is for
A password can be guessed or leaked. Two-step sign-in links an app on your phone that shows a fresh 6-digit code every 30 seconds. Setting it up is up to each person. Asking for the code every time you sign in is a separate switch that starts off; turn it on and a password alone won't open Sign OS.
What is on this screen
Each part of the screen above, top to bottom, and what changing it affects.
My account → Two-step sign-in
- Not set up · Set up
- Whether an authenticator app is linked to your login.
- Set up authenticator app
- Shows a square code to scan with the app, and a key you can type in instead if the camera won't read it. Then type the 6-digit code the app shows and choose Verify and finish. Cancel throws the half-finished set-up away.
- Ask for a code every time I sign in
- Off unless you turn it on. On, Sign OS asks for the code after your password every time you sign in. Turning it off needs a fresh code from the app, so someone with only your password can't switch it off.
- Remove authenticator
- Asks for a code from the app first, then unlinks it and turns the sign-in switch off. Delete the Sign OS entry from the app afterwards.
Signing in with a code
- Enter your code
- Shown after your password when the switch is on. Type the newest 6-digit code for Sign OS from the app and choose Continue.
- Sign out
- Leaves without signing in, for example on a shared computer.
Settings → Team → Users & permissions → a person
- Two-step sign-in
- Whether that person has it set up and whether it asks at every sign-in. Admins only.
- Reset two-step sign-in
- For a lost or replaced phone: removes their authenticator and turns off their sign-in code, so they sign in with just their password and set it up again. You can't reset your own; remove yours from My account.
Before you start
- An authenticator app on your phone. Any standard one works: Google Authenticator, Microsoft Authenticator, Authy, 1Password, Bitwarden and the like.
- Your phone's clock set automatically, or the codes won't match.
Step by step
- 1
Open your name at the bottom of the sidebar and choose My account.
- 2
Under Two-step sign-in, choose Set up authenticator app.
- 3
In the authenticator app on your phone, add an account and scan the code on screen. If it won't scan, type in the key shown under it.
- 4
Type the 6-digit code the app shows and choose Verify and finish.
- 5
If you want a code every time you sign in, turn on Ask for a code every time I sign in. Leave it off if you'd rather not.
Tips & gotchas
- Lost your phone? Ask the shop owner to reset your two-step sign-in from Users & permissions, then set it up again on the new phone.
- Only reset someone when you're sure it's really them asking: a reset lets them in with just their password.
- A code is only good for about 30 seconds. If one fails, wait for the next one.