Set up two-factor authentication

With two-factor authentication, every sign-in needs a second proof on top of your password or one-time code: a 6-digit code from an authenticator app on your phone. Even someone who knows your password or can read your email can’t get into your account — or your apps — without your phone.

Before you start

• You need an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator, Authy or 1Password.
• You need your password. UNENO asks for it, for your security, before you turn two-factor authentication on or off.
• If you only sign in with Google and have no UNENO password, you won’t see this card: you protect your sign-in directly in your Google account.

Turn on two-factor authentication

1. Click your name at the top right and choose Two-factor authentication. The card is marked Disabled, next to it Recommended: a second factor protects your account even if your password becomes known. Click Enable two-factor authentication.

   

2. Under Confirm your password, enter your password and click Continue.

   

3. Open your authenticator app, add a new account and scan the QR code. If you can’t scan, type the key next to the QR code into the app by hand.

   

4. The app now shows a new 6-digit code every 30 seconds. Enter the current code in Enter the 6-digit code from your app and click Confirm & Enable.

5. Save your recovery codes. They appear right after you turn the feature on: eight codes, each good for one sign-in if you lose your phone. Click Copy and keep the codes somewhere safe — in your password manager, for example.

   

Done: you see Two-factor authentication is now on., and the card is marked Enabled. From now on, UNENO asks for the second factor every time you sign in.

How you sign in now

After your password, your one-time code or Continue with Google, the Two-factor authentication page appears. Enter the current code from your app under Authentication code and click Verify.

Phone not at hand? Click Use a recovery code instead, enter one of your recovery codes and click Verify. Each code works only once.

Manage your recovery codes

• Show: Show recovery codes brings your codes back up at any time.
• Replace: Regenerate codes gives you eight new codes — the old ones stop working. Do this when you’ve used up several codes or fear someone has seen them.

Turn off two-factor authentication

Click Disable two-factor authentication and confirm your password if asked. Your sign-in then needs only your password, one-time code or Google again. Afterwards, remove the entry from your authenticator app — it is no longer valid.

Good to know

• The password prompt comes at most every three hours. If you’ve just confirmed your password, you can show or regenerate codes without entering it again.
• Code not accepted? If you see That code is invalid. Please try again., use the next code from the app. If it still fails, check that your phone sets its time automatically.
• Cancel during setup discards the QR code; two-factor authentication stays off.
• Lost your phone and your recovery codes? Then contact our support.
• Turning it on and off appears in the activity log — as Enabled two-factor authentication or Disabled two-factor authentication.