Do my team members need two factor?
Each person turns it on for their own account. Two factor belongs to the signed in person, not to the workspace.
Help Center
Secure your account with two factor
Turn on two factor, change your password, set an email safety code, and sign out places you do not recognize.
The Security tab in Settings keeps your sign in safe. Two factor is the strongest single step, because a password alone is no longer enough to get in.
Use this guide when
you want to turn two factor on or off, change your password, set an email safety code, or check where you are signed in.
Before you start
- Install an authenticator app on your phone if you do not have one yet. Any authenticator app works.
- Have your current password ready.
Steps
- Open Settings and choose Security. Sign in and two factor opens first, and it says whether two factor is on.
- If it says Two factor is off, choose Turn on two factor.
- Under Scan this code with your authenticator app, scan the code. If you cannot scan it, type the key from Or type this key into the app instead.
- Enter the code the app shows in Code from the app, and your password in Your current password.
- Choose Turn on two factor. From now on, signing in asks for a code from the app as well as your password.
There are no backup codes. Keep your authenticator app on a phone you trust. If you lose it, choose Contact support on the code step of sign in and we will help you get back in.
Turn off two factor
Open the Two factor card, enter your current password and a code from your authenticator app, and choose Turn off two factor. After that, only your password protects your account.
Change your password
Under Change password, enter your Current password, your New password and Repeat password, then choose Change password. While two factor is on, also enter the Code from your authenticator app. A password has 6 to 64 characters.
Changing your email in Profile asks for the same code while two factor is on.
Changing it signs out your other sessions and turns off your API keys, so you will need to create new keys for your integrations. This device stays signed in. If you do not know your password, sign out and use Lost password on the sign in page.
Email safety code
Pick a word of up to 8 characters and choose Save code. We print it on most account, security, billing and order emails, so you know a message is really from Zapped. It is not on the signup confirmation, the confirmation for a new email address or team invitations. Treat a security or billing email without your code with suspicion.
Linked sign ins
If you signed up with Google or another provider, a Linked sign ins card lists each one with a Remove button. Removing one asks for your Current password and, while two factor is on, the code from your authenticator app. We email you when a sign in is removed.
Where you are signed in
This list groups your sessions by device. It marks This device, and Remembered for browsers that stay signed in. Choose Sign out next to anything you do not recognize.
Sign out other sessions signs out every other browser and device, including remembered logins. This device stays signed in. Your API keys are turned off too, so you will need to create new keys for your integrations.
Good ways to use this
- Turn on two factor before you share cards or invite a team.
- Use a password you do not use anywhere else.
- Check Where you are signed in after you use a shared or borrowed computer.
Common questions
Which authenticator app should I use?
Any app that gives you a 6 digit code that changes every few seconds works.
If something looks wrong
- If the code from the app is refused, check that your phone's clock is set automatically, then try the newest code.
- If you cannot sign in without your authenticator, choose Contact support on the code step of sign in.
- If you see a session you do not recognize, sign it out, change your password and check your Activity log.
Was this guide helpful?
Still have questions? Contact support and we'll help you out.