Skip to content
Help Center
Start 10-day free trialStart 10-day free trialStart 7-day free trialStart 10-day free trialStart 10-day free trialStart 10-day free trialStart 10-day free trialStart 10-day free trialStart free

Set up two-step sign-in

Two-step sign-in adds an authenticator app to your account, with recovery codes for the day you lose the phone. It belongs to you and follows you into every workspace.

Turn it on

Section titled “Turn it on”
  1. Click your avatar and choose My account, or open Settings → My account. Find Sign-in and security. With no workspace yet, Your account is the same screen.
  2. On the Two-factor authentication row, switch it on.
  3. In your authenticator app, scan the QR code. If you cannot scan, use Or enter the secret manually.
  4. Type the 6-digit code into the field and click Verify and activate.
  5. Your Recovery codes appear once. Click Copy all codes and keep them somewhere safe. Click I have saved my recovery codes.

Each recovery code works once.

Choose when it asks for a code

Section titled “Choose when it asks for a code”

A separate switch, Ask for a code at every sign-in, decides whether signing in asks for the code.

  • On: after you sign in with a password, an emailed code or Google, Keelvy asks for the 6-digit code from your authenticator app.
  • Signing in with a passkey does not ask for the code, whatever the switch says. A passkey is already two factors: the device and your fingerprint, face or screen lock. See Add a passkey.
  • Off: sign-in does not ask. The code is still asked where more care is due, as below.

Where the code is always asked

Section titled “Where the code is always asked”

Your authenticator code, or a recovery code, confirms the sensitive changes on Sign-in and security:

  • turning two-step sign-in off (Disable 2FA, then Yes, disable)
  • generating new recovery codes
  • adding or removing a passkey

The platform console keeps asking for the code, which is the one place an administrator of Keelvy itself works.

When an administrator requires it

Section titled “When an administrator requires it”

A workspace administrator can require two-step sign-in for you. Then entering that workspace needs a sign-in that passed the second factor, or a passkey sign-in. If you have no authenticator app yet, you set one up first. While it is required you cannot switch it off yourself. See Require two-step sign-in for a person.

Recovery codes

Section titled “Recovery codes”

Recovery codes shows how many unused codes are left. When it says you are running low, click Generate new codes and confirm with your authenticator code or a passkey. The current codes stop working at once. Copy the new set before closing it.

Lost the phone

Section titled “Lost the phone”

Use one of your recovery codes wherever a code is asked. Each works once. Then switch two-step off, confirm with a recovery code, switch it on again on the new device and save the new recovery codes.

Section titled “Related”