Manage your two-factor methods

Everything below happens in My profile → Two-factor authentication.

An authenticator app, a passkey and a security key. The passkey is preferred

Choose your preferred method

The preferred method is the one the second step shows first. Your first method becomes preferred on its own.

To change it, click Make preferred next to another method.

The preferred method has a Preferred tag.

Make preferred and the tag only appear once you have more than one method.

Recovery codes can't be preferred.

Change your authenticator app

Use this when you get a new phone or move to another app.

Next to Authenticator app, click Change app. You may be asked to confirm it's you.

Scan the new QR code with the new app.

Type the code it shows and click Save.

Your old app keeps working until you click Save. If you click Cancel, nothing changes. After Save, only the new app's codes work. We email you to say a new authenticator app was added.

Rename a passkey or security key

You choose the name when you add a passkey or key, and the page doesn't offer a way to change it later. To use a different name, add the passkey or key again under the new name, then remove the old entry.

Remove a method

Click Remove next to the method.

Confirm in the dialog:

Remove “YubiKey 5C”? You will no longer be able to use it to sign in.

You may be asked to confirm it's you.

Things to know:

Removing your last method turns two-factor authentication off. The dialog tells you this before you confirm. Your recovery codes are deleted too.

Removing a passkey here only removes it from Shorter Loop. Your device or password manager may still show it. You can delete it there as well.

If you remove your preferred method, another method becomes preferred.

We email you to say the method was removed.

Turn off two-factor authentication

At the bottom of the section, click Turn off two-factor authentication.

Confirm:

Turn off two-factor authentication? Signing in will no longer ask for a second step. Your methods and recovery codes will be removed.

Confirm it's you if asked.

Every method and every recovery code is removed. We email you to say two-factor authentication was turned off.

When you can't turn it off

Some accounts must keep two-factor authentication on:

Acme Test requires two-factor authentication, so you cannot turn it off.

Message	Why
Company requires two-factor authentication, so you cannot turn it off.	A company you belong to requires it. You can still change, add and remove methods, as long as one stays.
Staff accounts must keep two-factor authentication on.	Shorter Loop staff accounts always need it.

The same rule stops you removing your last method.