Setting up two-factor authentication

Two-factor authentication (2FA) adds a second step to signing in. After your password, CloudPress asks for proof that only you have — a code from an app on your phone, or a tap on a security key. Someone who learns your password still can't get into your account.

You can use any combination of these second factors:

2FA is set per user, not per workspace: once it's on, it protects every workspace you have access to.

Open your security settings

1. Open your user menu. Click your avatar in the top-right corner of the dashboard and choose My Settings.
2. Go to the security settings. In the left-hand menu, under Security, click Security settings. This opens the Two-factor authentication page, which lists your security keys, passkeys, authenticator app and recovery codes.

Set up an authenticator app

1. Start the setup. Under Authenticator app, click Set up an authenticator app. Confirm your identity if you're asked to.
2. Add a new account in your app. Open your authenticator app on your phone and choose to add a new account.
3. Scan the QR code. Point the app at the QR code on the page. Can't scan it? Enter the key shown below the QR code into the app by hand.
4. Enter the code. Type the 6-digit code your app now shows into the 6-digit code field and click Verify and turn on.

Two-factor authentication is now on. CloudPress takes you straight to your recovery codes — save them before you do anything else.

Add a security key

1. Start adding the key. Under Security keys, click Add security key. Confirm your identity if you're asked to.
2. Register the key. Click Add security key again, then insert or tap your key when your browser asks.
3. Name the key. Give it a name you'll recognize later, such as YubiKey on my keyring, and click Save.

The key now appears in the Security keys list. Add a spare key the same way, so losing one doesn't lock you out.

Use a passkey

A passkey lets you sign in with your fingerprint, face or device PIN instead of a password, and it also counts as your second factor. To add one, click Manage passkeys under Passkeys, then Add passkey, and follow your browser's prompts.

Save your recovery codes

Recovery codes are your way back in if you lose your phone or security key. You get ten codes; each one works only once.

1. Open your codes. Under Recovery codes, click Generate recovery codes (or View or regenerate recovery codes if you already have them). If you just set up an authenticator app, you're already on this page.
2. Store them somewhere safe. Save the codes in a password manager, or print them and keep them in a safe place — not only on the phone that runs your authenticator app.

A code you've used appears struck through. Running low, or think someone else has seen your codes? Click Generate new codes: you get ten fresh codes and the old ones stop working immediately.

Sign in with two-factor authentication

After you enter your email and password, CloudPress asks you to confirm it's you:

• If you have a security key or passkey, you're asked to use it first. Click Use security key and follow your browser's prompt.
• Otherwise, enter the 6-digit code from your authenticator app and click Verify.

Don't have that factor with you? Use the links under the form — Use your authenticator app instead or Use a recovery code instead — to switch to another one.

Manage your second factors

• Replace your authenticator app — for example, when you move to a new phone. Click Set up a new authenticator app, then Create a new secret, and scan the new QR code. Codes from your old app stop working immediately, so finish the setup in the same session.
• Remove a security key — click the trash icon next to the key in the Security keys list, or open the key and click Remove security key. Make sure you still have another second factor left.

Next steps

• Inviting users and managing roles — ask the people you invite to turn on 2FA too.
• Viewing invoices