How do I use two-step sign-in in the app?

Two-step sign-in adds a second step when you sign in. After your password, Google or Apple, the app asks for a 6-digit code: from an authenticator app, or one Bluedeer emails to your account's address. It is one setting for your whole account, so turning it on in the app also turns it on for the web app. For the web steps, see How do I turn on two-step sign-in?

Turn it on

1. Open Settings and choose the Account tab.
2. Under Profile & plan, tap Two-step sign-in. The row shows On or Off.
3. Tap Set up two-step sign-in.
4. Choose where the code comes from: Authenticator app or Emailed codes.

With an authenticator app

1. On Add to your authenticator app, tap Open in Authenticator to add your account to an authenticator app on this phone. If your authenticator app is on another device, tap Another device? Show QR code and scan the code. The key under Or enter manually: works too, if you can't scan.
2. Tap Next.
3. Type the 6-digit code that your authenticator app shows, then tap Turn on.

With emailed codes

1. Bluedeer emails a code to your account's address. The screen says where it went: "We sent a code to … Enter it to turn emailed codes on."
2. Type the 6-digit code from the email, then tap Turn on.

The app then says "Two-step sign-in is on". If it says the code was not accepted, check the app (or the newest email from Bluedeer) and type the newest code. If it keeps refusing, go back and start again.

Sign in with a code

After you sign in with your password, Google or Apple, the app shows Confirm it’s you. It says which code it is waiting for: "Use the current code from your authenticator app." or "Enter the 6-digit code we emailed you."

1. Find the code in your authenticator app, or in the email. The email has the code at the start of its subject line, for example "834935 is your Bluedeer sign-in code", and the code expires after 10 minutes.
2. Type the 6 digits. You can also copy the code and tap Paste code. The app checks the code as soon as all 6 digits are in. You can also tap Verify code.

The screen shows how long the step has left. It lasts 5 minutes. If the time runs out, or after five wrong codes, tap Restart sign in and sign in again.

Two sign-ins never ask for a code: a passkey, and your company's single sign-on, whose identity provider takes care of the second step.

If you lose your authenticator app

Bluedeer has no backup or recovery codes. Keep your authenticator app safe, or use one that can back up its codes. If you can't get a code, see What if I lose my authenticator app?

Turn it off

1. Open Settings, then the Account tab, and tap Two-step sign-in.
2. Tap Turn off two-step sign-in.
3. Enter the current code from your authenticator app. If emailed codes are your only second step, Bluedeer emails you a code for this, and the screen says where it went.
4. Tap Turn off.

The app says "Two-step sign-in is off". Your password, Google or Apple signs you in without a code after that. With an authenticator app, turning it off needs a code from that app, so do it before you remove Bluedeer from the app.

If a shared workspace you're in requires two-step sign-in or a passkey and you have no passkey, the app warns you first which workspaces you will lose access to. Tap Cancel to keep it on, or Turn off anyway.

Bluedeer emails you when two-step sign-in is turned on or off. See Which emails does Bluedeer send?

"Confirm it’s you" in Passkeys

You may also see Confirm it's you when you add or remove a passkey. That one is not a sign-in code. It is explained in What is "Confirm it's you" and when does it ask?