Two-factor: backup codes and trusted browsers

Make new backup codes, remove a trusted browser, and reset two-factor for someone who lost their phone.

Help centre

Before you start

Owners and managers set up two-factor the first time they sign in on the web. Security shows Two-factor enabled when it's on.

  1. Open Security, from the menu under your name or from Settings.
  2. Under Backup codes, see how many of your 10 are left. Choose Make new backup codes, and save the new ones: your old codes stop working.
  3. Under Trusted devices, choose Remove next to a browser you no longer use. You trust a browser when you enter a two-factor code.

Reset two-factor for someone

  1. On Team, open the person and choose Reset two-factor.
  2. Add a Reason (optional), which is kept in the audit log, and choose Reset two-factor.

What happens next

A reset removes their authenticator app, backup codes and trusted browsers, signs them out everywhere, and emails them. A manager sets two-factor up again next time they sign in. Cleaners can if they want to; they don't have to.

If something goes wrong

  • “Too many resets. Try again later.”: wait a while.
  • “We couldn't send them an email, so let them know.”: tell them yourself.
  • Lost your own phone: on the sign-in page, choose Lost your phone?, or sign in with a backup code.

Who can do this

Everyone looks after their own backup codes and trusted browsers. Only the owner resets two-factor, for a manager or cleaner.

Still stuck? Send us a message.

Start tomorrow sorted.

No card needed. Cancel any time.