How do I turn on two-step sign-in?

Two-step sign-in adds a second step when you sign in with your password, Google or Apple: Bluedeer then asks for a 6-digit code. The code comes from an authenticator app on your phone, or Bluedeer emails it to your account's address. These steps are for the web app. For the phone, see How do I use two-step sign-in in the app?

Turn it on

1. Open Settings and choose the Account tab.
2. Find Two-step sign-in and click Set up.
3. In the Set up two-step sign-in window, choose where the code comes from: Authenticator app or Emailed codes.

With an authenticator app

1. In the Set up an authenticator app window, scan the QR code with an authenticator app. If you cannot scan it, copy the key shown under Can't scan it? Enter this key instead using the copy button next to it, and enter the key in your app.
2. Enter the 6-digit code that the app shows in the 6-digit code box, then click Turn on.

If the code is not accepted, check the app and try the newest code.

With emailed codes

1. Bluedeer emails a code to your account's address, and the Set up emailed codes window says where it went.
2. Enter the 6-digit code from the email in the 6-digit code box, then click Turn on.

If the code is not accepted, check the newest email from Bluedeer and try again. The email has the code at the start of its subject line, for example "834935 is your Bluedeer sign-in code", and the code expires after 10 minutes.

After it is on, the Two-step sign-in row says how Bluedeer asks: a code from your authenticator app, or a code it emails you. Each sign-in with your password, Google or Apple then asks for that code. The sign-in screen says which one it is waiting for.

Turn it off

1. In the Two-step sign-in row, click Turn off.
2. In the Confirm with a code window, enter a code from your authenticator app. If emailed codes are your only second step, Bluedeer emails you a code for this, and the window says where it went.
3. Click Turn off.

Your password, Google or Apple signs you in without a code after that.

If a shared workspace you're in requires two-step sign-in or a passkey and you have no passkey, Bluedeer warns you first: for example "Acme requires two-step sign-in or a passkey. If you turn this off, you'll lose access to Acme until you set one up again." Click Cancel to keep it on, or Turn off anyway. Your account and your other workspaces are not affected, and the workspace opens again as soon as you turn it back on or add a passkey. See Require two-step sign-in for everyone in your workspace.

Bluedeer emails you when two-step sign-in is turned on or off. See Which emails does Bluedeer send?

Sign-ins that skip the code

• A passkey. Signing in with a passkey never asks for a 6-digit code, even with two-step sign-in on. A passkey already needs both your device and your fingerprint, face or device PIN.
• Your company's single sign-on. If your workspace uses single sign-on, signing in with it never asks for Bluedeer's code either: your company's identity provider takes care of the second step.

The code step

The sign-in step stays open for 5 minutes. Reloading the page keeps you on the code step while it is still open. If the step has expired, Bluedeer says This step has expired and offers Sign in again; click it, or Back to sign in, and sign in again to get a new code.