Turn on two-factor sign-in and passkeys

Goal

Make your own sign-in harder to break into by requiring a code from an authenticator app, and optionally sign in with a passkey instead of a password.

Prerequisites

• An authenticator app on your phone, such as Google Authenticator, Authy or 1Password.
• A safe place to store backup codes, such as a password manager.
• For a passkey, a device or browser that supports passkeys (fingerprint, face or device PIN).

Steps

1. Open Settings > My account > Sign-in security.
2. Under Two-Factor Authentication, select Enable 2FA.
3. Scan the QR code with your authenticator app. If you cannot scan it, use the Manual entry key shown under the code.
4. Copy the Backup Codes and store them somewhere safe. Each code works once, and they are shown only now.
5. Select Continue.
6. Type the 6-digit code from your authenticator app into Verification Code.
7. Select Verify & Enable. A screen confirms that 2FA is enabled. Select Done.
8. To add a passkey, scroll to Passkeys on the same page and select Add passkey.
9. Follow your device's prompt to confirm with your fingerprint, face or PIN.

Expected result

The page shows two-factor authentication as Enabled, and 4fleet asks for a code from your app when you sign in on a new device. A device you have verified is remembered for 30 days, and signing in with a passkey also counts as the second step. A new passkey appears in the Passkeys list, and the sign-in page offers Sign in with a passkey.

Troubleshooting

• If you see "Invalid verification code", check the time on your phone and enter the newest code from the app.
• If you lost your phone, at the sign-in code step choose Lost access to your app? Use a backup code and enter one of your saved codes.
• If you see "Couldn't add the passkey. Try again.", try again. Cancelling the device prompt does not show an error.
• To remove a passkey, select Remove passkey next to it and confirm. Your other passkeys and your password are not affected.
• To switch 2FA off, select Disable 2FA and enter a code from your authenticator app.
• If a message says two-factor verification is needed to continue, this session has not completed the code step or has expired. Sign in again and enter the code from your app.