Sign inCreate account

Two-factor authentication

Add an authenticator app to your sign-in, and keep recovery codes somewhere safe.

With two-factor authentication on, signing in asks for your password and a code.

Turn it on

  1. Open Settings, then Two-factor authentication.
  2. Confirm your password.
  3. Scan the code with your authenticator app. If you cannot scan it, add the setup key by hand: time-based, 6 digits, 30 seconds.
  4. Enter a code from the app to finish.

Recovery codes

Kistrl gives you a set of recovery codes. Each one replaces a single authenticator code if you lose your phone.

  • Keep them in a password manager or on paper. Do not keep them in this mailbox: you cannot open it while you are locked out.
  • Recovery codes replace the authenticator, never the password.
  • If you are running low, turn two-factor authentication off and on again to get a new set.

If you lose your authenticator and your codes

There is no self-service way back in. Your Kistrl administrator has to verify who you are and turn two-factor authentication off for you.

Changing your password

Open Settings, then Password. Use at least 12 characters.