Two-factor

With two-factor on, logging in with your password also asks for a code from an authenticator app on your phone. Someone who learns your password still cannot get in without it.

Two-factor is yours alone: you turn it on for yourself, and nobody can turn it on for you. It works the same on every Plan.

It is asked after a password, never after Google. When you sign in with Google, your Google account’s own protection applies.

Turning it on

You need a password to turn on two-factor. When you sign in only with Google, set one first under Sign-in methods on Account settings.

1. Open Account settings. Under Two-factor, press Turn on.
2. Enter your password and press Next. You will be logged out on your other devices.
3. Open your authenticator app and scan the code on the screen. If your app cannot scan, enter the key shown under it. Press Next.
4. Enter the code your app shows for uup, and press Confirm.
5. Save your backup codes: press Copy or Download, keep them somewhere safe, tick I saved these codes, and press Done.

The card now says On, with the day you turned it on.

Logging in

After your email and password, enter the code your app shows now: a code of 6 digits. A new code appears every 30 seconds.

Without your phone, press Use a backup code instead and enter one of your backup codes.

After 10 wrong codes in a row, logging in stops taking codes for 15 minutes. Wait, then log in again.

Backup codes

You get 10 backup codes. Each one works once, in place of a code from your app. We show them only when they are made, so save them then.

To get a fresh set, press Make new backup codes, and enter your password and a code from your app. Your old backup codes stop working.

Turning it off

Press Turn off, and enter your password and a code from your app. Logging in then no longer asks for a code.

Changing your email and deleting your account also ask for a code from your app while two-factor is on.

When you lose your device

Log in with one of your backup codes. Each one works once. Turning two-factor off and making new backup codes both ask for a code from your app, so keep your backup codes until you can use the app again.

Forgot password does not get you past two-factor, and does not turn it off.

When you have neither your device nor your backup codes, write to support@uup.dev. Only we can turn two-factor off for you, and only when you ask in writing. When we do, you are signed out on every device, and we email you to say so.