Add a second factor: a passkey or an authenticator app

If you own or manage a workspace, sensitive changes need a second factor first: a passkey or an authenticator app. They are:

• your email address and your sign-in methods;
• exporting and downloading your account's data;
• letting Sovrasign support in, and who may see your account's metadata;
• the plan and payments: changing or canceling the plan, and the payment details.

Without one, Sovrasign shows Add a second factor. Open Settings, then Sign-in and security, and add a passkey or set up an authenticator app.

Set up an authenticator app

1. In Sign-in and security, find "Authenticator app" and choose "Set up".
2. Scan the QR code with your authenticator app, or type the key shown below it.
3. Enter the 6-digit code the app shows for Sovrasign.
4. Save the recovery codes shown in "Save your recovery codes", for example in a password manager ("Copy" copies them), then choose "I saved them".

The page says "The authenticator app is set up. Sign-ins without a passkey now ask for its code." Each recovery code works once, instead of the app's code.

Sign in with the app's code or a recovery code

When Sovrasign asks "Enter the code from your authenticator app", open the app and type the code it shows now. If you do not have the app, choose "Use a recovery code" and type one of your saved codes. A sign-in with a passkey does not ask for the app's code.

Lost the app and the recovery codes? See Recover your account.

A recent sign-in

These changes also need a sign-in in the last 15 minutes. Setting up an authenticator app or adding a passkey needs one in the last 12 hours. If yours is older, Sovrasign says, for example:

For your safety, sign in again to change your plan: it needs a sign-in in the last 15 minutes.

Sign in again, then repeat the change.

Problems

"To change your plan, first add a passkey or an authenticator app in Settings: owners and admins need a second factor." (error code second_factor_required) The message names the change you tried. Add a passkey or an authenticator app as above, then try again.

"Enter the code from your authenticator app to continue." (error code second_factor_needed) Type the code the app shows now, or use a recovery code.

"That code is not right. Check that your phone's clock is right, and type the code your app shows now." (error code wrong_code) The codes depend on the time: set your phone's clock to update automatically.

"That code was used already. Wait for the next one." (error code code_used) Each code works once. Wait until the app shows a new one.

"That recovery code is not right, or it was used already." (error code wrong_recovery_code) Check what you typed, or use another of your saved codes.