Two-factor authentication

Two-factor authentication (2FA) asks for a six-digit code after you sign in, which makes it much harder for someone else to get into your account. You can use one of two methods:

• Authenticator app. A rotating code from an app such as 1Password, Authy, or Google Authenticator. It works with no signal.
• Email. A six-digit code sent to your account address when you sign in on a new browser.

Set up an authenticator app

1. Open Settings, then the Privacy tab, and find Two-factor authentication.
2. Choose Authenticator app.
3. Scan the QR code with your app. If you cannot scan it, click Cannot scan it? Show the setup key and type the key into your app instead.
4. Enter the six-digit code your app shows and click Verify.

You will see "Authenticator app is on." and a Protected label. Codes change every 30 seconds, so if one is rejected, wait for the next one.

Set up email codes

1. Open Settings, then the Privacy tab, and find Two-factor authentication.
2. Choose Email. Surbee sends a six-digit code to your account address.
3. Enter the code and click Verify.

You will see "Email codes are on." Each emailed code expires after ten minutes. After you answer a code, that browser is not asked again for about 12 hours.

Signing in with 2FA

After you sign in with Google or your magic link, Surbee shows Enter your code. Type the six digits from your authenticator app or your email and click Continue.

Turning it off

On the Privacy tab, click Turn off.

• Email codes. Surbee sends a fresh code. Enter it to confirm it is you.
• Authenticator app. If you see "Sign out and back in, answering your code, then remove it.", sign out, sign back in with your code, and click Turn off again.

If you lose access

• Lost your phone but can still read your email? Restore your authenticator from its backup, or set it up on a new device from your password manager.
• Locked out completely? Email [email protected] from the address on your account. Tell us which method you used. We will verify that the account is yours before we remove the second factor, so expect a few questions.
• Lost access to your email? Email codes and magic links both go to that address, so recover the email account with your email provider first. If you cannot, contact us at the address above.