# How do I use two-factor authentication in the app?

Turn two-factor authentication on or off in the Bluedeer app, sign in with a code from your authenticator app, and what to do if you lose that app.

Two-factor authentication adds a second step when you sign in. After your password, Google or Apple, the app asks for a 6-digit code from an authenticator app. It is one setting for your whole account, so turning it on in the app also turns it on for the web app. For the web steps, see [How do I turn on two-factor authentication?](https://support.bluedeer.ai/bluedeer/account-and-security/turn-on-two-factor-authentication.md)

## Turn it on

1. Open Settings and choose the **Account** tab.
2. Under **Profile & plan**, tap **Two-Factor Auth**. The row shows **Enabled** or **Disabled**.
3. Tap **Enable Two-Factor Auth**.
4. On **Add to Authenticator**, tap **Open in Authenticator** to add your account to an authenticator app on this phone. If your authenticator app is on another device, tap **Another device? Show QR code** and scan the code. The key under **Or enter manually:** works too, if you can't scan.
5. Tap **Next**.
6. On **Enter Verification Code**, type the 6-digit code that your authenticator app shows, then tap **Verify & Enable**.

The app says "Two-factor authentication has been enabled successfully." If it says "Invalid verification code. Please try again.", check the app and type the newest code. If it keeps refusing, go back and tap **Enable Two-Factor Auth** again to start over.

## Sign in with a code

After you sign in with your password, Google or Apple, the app shows **Confirm it’s you**.

1. Open your authenticator app and find the code for Bluedeer.
2. Type the 6 digits. You can also copy the code and tap **Paste code**. The app checks the code as soon as all 6 digits are in. You can also tap **Verify code**.

The screen shows how long the step has left. It lasts 5 minutes. If the time runs out, or after five wrong codes, tap **Restart sign in** and sign in again. **Need help?** reminds you to open your authenticator app for a new code.

In some cases Bluedeer emails the code to you instead. Enter that code on the same screen. The email has the code at the start of its subject line, for example "834935 is your Bluedeer sign-in code", and the code expires after 10 minutes.

Signing in with a [passkey](https://support.bluedeer.ai/bluedeer/account-and-security/sign-in-with-a-passkey.md) never asks for a code.

## If you lose your authenticator app

Bluedeer has no backup or recovery codes. Keep your authenticator app safe, or use one that can back up its codes.

If you can't get a code:

- If you added a passkey, tap **Sign in with a passkey** on the sign-in screen. A passkey signs you in without a code.
- Resetting your password does not turn off two-factor authentication.
- Otherwise, write to support@bluedeer.ai from the email address on your account.

## Turn it off

1. Open Settings, then the **Account** tab, and tap **Two-Factor Auth**.
2. Tap **Disable Two-Factor Auth**.
3. Enter the current code from your authenticator app.
4. Tap **Disable**.

The app says "Two-factor authentication has been disabled." Your password alone signs you in after that. Turning it off needs a code from your authenticator app, so do it before you remove Bluedeer from that app.

Bluedeer emails you when two-factor authentication is turned on or off. See [Which emails does Bluedeer send?](https://support.bluedeer.ai/bluedeer/account-and-security/security-emails.md)

## "Confirm it’s you" in Passkeys

You may also see **Confirm it's you** in **Passkeys**. That one is not a two-factor code. Adding or removing a passkey needs a recent sign-in, so the app asks for your password or a passkey first.