Signing in, two-step verification and passkeys

You can sign in with an email and password, with Google/Apple/Microsoft when the server offers them, or with a passkey.

Two-step verification (2FA)

Turn it on under Account → Security. You scan a QR code with an authenticator app and receive backup codes — store them somewhere safe. Each sign-in then asks for a 6-digit code (or a backup code). Admin accounts must have it enabled.

Passkeys

A passkey is a sign-in stored in your device's password manager (Windows Hello, Touch ID, a security key). Add one under Account → Security → Passkeys, then use "Sign in with a passkey" on the login page. Passkeys replace the password and the code. If passkeys are switched off on this server you will see PASSKEYS_DISABLED.

Linked sign-in methods

Account → Security → Linked accounts lists the providers attached to your account. You cannot remove your last way of signing in (LAST_CREDENTIAL) — add a password or another provider first.

Troubleshooting

• ACCOUNT_LOCKED: too many wrong passwords; wait a few minutes.
• STEP_UP_REQUIRED: a sensitive action asks you to confirm your password or code again.
• Desktop and extension sign in by opening the portal in your browser — they never see your password.