Sign-in security
Two-step verification, recovery codes and signing in with Google or Microsoft.
You can protect your account with two-step verification: besides your password, you enter a code each time you sign in. You can also sign in with your Google or Microsoft account. You manage all of this under Sign-in & security in the menu.
Authenticator app
An app on your phone, such as Microsoft Authenticator or Google Authenticator, shows a new 6-digit code every 30 seconds. To set it up, choose Set up authenticator app and scan the QR code with the app. Can you not scan the code? Then type the key shown below the QR code into the app instead.
Confirm with the code that the app shows. You can turn the authenticator app off again at any time with a code from the app or a recovery code, unless your Admin requires two-step verification.
Email codes
Prefer not to use an app? Turn on email codes. At every sign-in we email you a 6-digit code. The code is valid for 10 minutes, and you can ask for a new one after a short wait.
Recovery codes
When you set up an authenticator app, you receive 10 recovery codes. If you lose your phone, each code lets you sign in once. Save them somewhere safe: copy them or download them as a text file. We do not show them again.
You can see how many codes are left and make new ones at any time. New codes replace all of your old ones.
Remembered browsers
When you enter a code, you can tick 'Remember this browser for 30 days'. On that browser we then do not ask for a code for 30 days. Only do this on your own device, not on a shared one.
Under Remembered browsers you see where you are remembered. Sign out one browser, or all of them, to be asked for a code there again.
Signing in with Google or Microsoft
Instead of a password, you can sign in with your Google or Microsoft account. You can register your organization this way, accept an invitation, or link a provider to your existing account under Linked accounts. You can link one account per provider. When you sign in this way, the security of that account applies, so we do not ask for a second code.
To unlink an account, you need another way to sign in. If you have no password yet, set one first.
Your IT department may need to approve AquaTrace once before you can sign in with a Microsoft or Google work account.