Secure your account
Found this helpful? Share it:
Found this helpful? Share it:
Add a second factor, sign in without a password, and review every device and session on your account. It all lives under Settings → Security🪪
Two-factor authentication asks for a code from your authenticator app on top of your password, so a stolen password alone is not enough to sign in.
Open Settings → Security and choose Enable under Two-factor authentication
Confirm your password
Scan the QR code with an authenticator app, or enter the setup key by hand
Enter the 6-digit code from the app to confirm
Save your backup codes somewhere safe
Backup codes are single-use and let you sign in when you cannot reach your authenticator. You can regenerate them at any time, which replaces the old set. Turn on Always require a second factor to be asked at every sign-in, even on trusted devices.
A passkey lets you sign in with Touch ID, Windows Hello, or a hardware security key instead of typing a password. Add one from Settings → Security → Passkeys and follow your browser's prompt. You can name, rename, and remove passkeys, and add more than one so you always have a backup.
Passkeys are convenient and phishing-resistant, because they only work on the real idapt site. Keep at least one other way to sign in, such as your password or a synced passkey, in case you lose a device.
Browser sessions lists every browser currently signed in to your account, with the current one marked. To sign out somewhere else, choose the trash icon next to that session, or use Revoke all others to sign out everywhere except where you are now.
Revoking a session takes effect immediately. Your current session is never affected when you revoke the others, so you stay signed in here.
When you pass a second-factor check you can mark a device as trusted so it skips the second factor next time. Trusted devices lists those devices. Revoke one to require verification there again on its next sign-in.
Devices shows the browsers where idapt has seen activity from your account, along with where each was last seen. It is a read-only overview, and a single device can hold several sessions over time. If you spot something you do not recognize, change your password and revoke its sessions.
Your email address and password also live under Settings → Security. For the steps to change either, see Account settings.
Related articles
Was this helpful?