Signing in, passkeys and two-step sign-in
Sign in with a passkey or a code by email, and add an authenticator app if you like.
There are two ways in:
- A passkey: your device asks for your fingerprint, face or PIN. You don't even type your email address.
- A code by email: 6 digits, valid for 10 minutes, 5 tries.
Without a passkey you can always get in with a code by email.
Passkeys
Under Settings you see your passkeys: their name, when you added them and when you last used them. You can rename, add and remove them. Lost a device? Remove its passkey, and every other session ends too. "Sign out everywhere else" does that without removing anything.
Two-step sign-in
Turn on an authenticator app (TOTP) and, after the code by email, you also type the code from the app. You get 10 recovery codes for when the app is gone; each works once. A passkey needs no second step.
Turning two-step sign-in off, or signing in with a recovery code, sends you an email.
Updated 23 October 2026