# How do I use two-step sign-in in the app?

Turn two-step sign-in on or off in the Bluedeer app with an authenticator app or emailed codes, sign in with a code, and what to do if you lose your authenticator app.

Two-step sign-in adds a second step when you sign in. After your password, Google or Apple, the app asks for a 6-digit code: from an authenticator app, or one Bluedeer emails to your account's address. It is one setting for your whole account, so turning it on in the app also turns it on for the web app. For the web steps, see [How do I turn on two-step sign-in?](https://support.bluedeer.ai/bluedeer/account-and-security/turn-on-two-step-sign-in.md)

## Turn it on

1. Open Settings and choose the **Account** tab.
2. Under **Profile & plan**, tap **Two-step sign-in**. The row shows **On** or **Off**.
3. Tap **Set up two-step sign-in**.
4. Choose where the code comes from: **Authenticator app** or **Emailed codes**.

### With an authenticator app

1. On **Add to your authenticator app**, tap **Open in Authenticator** to add your account to an authenticator app on this phone. If your authenticator app is on another device, tap **Another device? Show QR code** and scan the code. The key under **Or enter manually:** works too, if you can't scan.
2. Tap **Next**.
3. Type the 6-digit code that your authenticator app shows, then tap **Turn on**.

### With emailed codes

1. Bluedeer emails a code to your account's address. The screen says where it went: "We sent a code to … Enter it to turn emailed codes on."
2. Type the 6-digit code from the email, then tap **Turn on**.

The app then says "Two-step sign-in is on". If it says the code was not accepted, check the app (or the newest email from Bluedeer) and type the newest code. If it keeps refusing, go back and start again.

## Sign in with a code

After you sign in with your password, Google or Apple, the app shows **Confirm it’s you**. It says which code it is waiting for: "Use the current code from your authenticator app." or "Enter the 6-digit code we emailed you."

1. Find the code in your authenticator app, or in the email. The email has the code at the start of its subject line, for example "834935 is your Bluedeer sign-in code", and the code expires after 10 minutes.
2. Type the 6 digits. You can also copy the code and tap **Paste code**. The app checks the code as soon as all 6 digits are in. You can also tap **Verify code**.

The screen shows how long the step has left. It lasts 5 minutes. If the time runs out, or after five wrong codes, tap **Restart sign in** and sign in again.

Two sign-ins never ask for a code: a [passkey](https://support.bluedeer.ai/bluedeer/account-and-security/sign-in-with-a-passkey.md), and your company's [single sign-on](https://support.bluedeer.ai/team/administration/single-sign-on.md), whose identity provider takes care of the second step.

## If you lose your authenticator app

Bluedeer has no backup or recovery codes. Keep your authenticator app safe, or use one that can back up its codes. If you can't get a code, see [What if I lose my authenticator app?](https://support.bluedeer.ai/bluedeer/account-and-security/lost-authenticator-app.md)

## Turn it off

1. Open Settings, then the **Account** tab, and tap **Two-step sign-in**.
2. Tap **Turn off two-step sign-in**.
3. Enter the current code from your authenticator app. If emailed codes are your only second step, Bluedeer emails you a code for this, and the screen says where it went.
4. Tap **Turn off**.

The app says "Two-step sign-in is off". Your password, Google or Apple signs you in without a code after that. With an authenticator app, turning it off needs a code from that app, so do it before you remove Bluedeer from the app.

If a shared workspace you're in requires two-step sign-in or a passkey and you have no passkey, the app warns you first which workspaces you will lose access to. Tap **Cancel** to keep it on, or **Turn off anyway**.

Bluedeer emails you when two-step sign-in is turned on or off. See [Which emails does Bluedeer send?](https://support.bluedeer.ai/bluedeer/account-and-security/security-emails.md)

## "Confirm it’s you" in Passkeys

You may also see **Confirm it's you** when you add or remove a passkey. That one is not a sign-in code. It is explained in [What is "Confirm it's you" and when does it ask?](https://support.bluedeer.ai/bluedeer/account-and-security/confirm-its-you.md)