Skip to main content

Two-factor authentication

Protect your CertWatchr account with a code from an authenticator app on top of your password, and keep recovery codes for when the phone is lost.

With two-factor authentication (2FA), signing in needs your password and a six-digit code from an app on your phone. Someone who knows your password still cannot get in.

2FA is optional and off until you switch it on.

Switch it on

  1. Go to Settings → Account → Two-factor authentication.
  2. Select the authenticator app option and confirm.
  3. Scan this code with an authenticator app — Google Authenticator, 1Password, Aegis, Bitwarden or any other TOTP app. Cannot scan? Type in the key shown below the code.
  4. Confirm a code: enter the six-digit code from the app and click Turn on two-factor. Only now is 2FA switched on.

From then on, every sign-in asks for a code — including sign-ins with Google, GitHub or Microsoft.

Recovery codes

So that a lost phone does not lock you out, generate recovery codes right after switching 2FA on: Settings → Account → Recovery codes.

  • Each code works once.
  • They are shown only once. Keep them somewhere other than your phone — a password manager is ideal.
  • A new set replaces the old one.

To use one, click Lost your device? Use a recovery code at the code prompt.

Switch it off

Go to Settings → Account → Two-factor authentication, select the option to disable it and confirm. If you signed in a while ago, you are asked for your password first.

Locked out?

No phone and no recovery codes left? At the code prompt, open Can't get a code?, choose Contact Administrator and click Submit. Our administrators get your request and write to you by e-mail to check that the account is really yours.

Once they have confirmed it, they can allow a sign-in code by e-mail for your account for a limited time, usually 24 hours. Then Send code via email appears under Can't get a code?: choose it, and enter the code from the e-mail within five minutes. After signing in, set up your authenticator app again and generate new recovery codes.

A code by e-mail is deliberately not offered otherwise: the same inbox can already reset your password, so it would not be a second factor.

You can also contact support directly.