Two-factor Authentication (2FA)
With two-factor authentication, your Picqer account is extra secure, making it harder for others to gain access to your account.
Once two-factor authentication is set up, you log in with your password and a code from an Authenticator app on a trusted device, such as your phone. You can use an app like Google Authenticator or Microsoft Authenticator.
On this page
Setting up two-factor authentication
Go to your profile.
Next to 'Two-factor authentication', click 'Enable'.
Open the Authenticator app, tap 'Scan QR code' or '+' and scan the QR code.
Can't scan it? Enter the secret key shown below the QR code manually instead.
Enter the 6-digit code shown in the Authenticator app. Two-factor authentication is now enabled.
Do you use the Picqer API with your username and password (HTTP Basic authentication)? That stops working once two-factor authentication is on. Use API keys instead.
Logging in with two-factor authentication
After you enter your password, Picqer asks for a 6-digit code. Use the code the Authenticator app is showing at that moment.
Once you've entered a valid code, Picqer remembers that browser as a trusted device for 4 weeks. If you log in again from the same browser during that time, Picqer won't ask for a code, even if you logged out in between. After 4 weeks, or in a different browser or a private window, Picqer asks for the code again.
Want to control where your users can log in from as well? Set up trusted IP addresses.
Disabling two-factor authentication
You can turn two-factor authentication off again in your profile.
Can't use the Authenticator app when logging in, for example because you got a new phone? Ask an administrator to disable two-factor authentication for your account. Any browsers Picqer remembered as trusted for you are invalidated straight away. You can then set up two-factor authentication again.
Are you the only administrator and can't log in? Contact support@picqer.com.
User overview for administrators
As an administrator, the user overview shows you which users have two-factor authentication enabled.
