Manage your sign-in and two-factor authentication

Your password, your two-factor authentication and the devices you are signed in on are managed on your account security page. You can open it from anywhere in the app.

Open your account security page

• From any screen: open your account menu (your name or picture at the top of the app) and choose Sign-in & two-factor.
• Or go to Account settings and press Manage sign-in & security on the Sign-in & security card.

The page opens in a new tab on auth.zinndigital.com, our secure sign-in service, on the Signing in page. To go back, press Back to the app at the top of that page, or the Zinn Digital® logo, or simply close the tab: the app is still open where you left it.

Change your password

1. On Signing in, under Basic authentication, press Update next to My password.
2. You may be asked to sign in again first. This is on purpose: it makes sure it really is you.
3. Type your new password twice and save it.

Set up an authenticator app (two-factor)

A second factor means a stolen password on its own is not enough to get into your account.

1. Install an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator, 1Password or Authy.
2. On Signing in, under Two-factor authentication, press Set up Authenticator application.
3. Scan the QR code with the app. If you cannot scan it, the page shows a key you can type in.
4. Type the six-digit code the app shows, give the device a name you will recognise (for example "My phone"), and submit.

From then on, after your password you are asked for the current code from the app.

Add a passkey (sign in without a password)

A passkey lets you sign in with your fingerprint, face or device PIN instead of typing your password. It cannot be phished, because it only works on our real sign-in page.

1. On Signing in, under Passwordless, press Set up Passkey.
2. Your browser or phone asks you to confirm with your fingerprint, face or PIN. Confirm it.
3. The passkey is now listed under Passwordless.

Next time, on the sign-in page, choose your passkey when your browser offers it, or press Sign in with a passkey. Your password keeps working too.

Save recovery codes

Recovery codes are one-time codes for the day your phone is lost or broken.

1. On Signing in, press Set up Recovery authentication codes.
2. Save the codes somewhere that is not your phone: a password manager, or printed. They are shown once.
3. Confirm you have saved them.

Each code works once. When you are running low, create a new set from the same page.

Remove or replace an authenticator or passkey

On Signing in, each authenticator and passkey you set up is listed with a Delete button. To move to a new phone, set up the new one first, then delete the old one, so you are never left without a way to sign in.

Sign out other devices

Open Device activity (under Account security) to see where you are signed in. You can sign out a single device, or every device at once. Do this if you signed in on a computer that is not yours, or think someone else knows your password.

If your organisation requires two-step sign-in

An organisation owner can require two-step sign-in for everyone in it, on the Sign-in security card of the organisation's profile. If yours does, you are asked to set up an authenticator the next time you sign in.

If you lost your phone

Sign in with your password and use one of your recovery codes when you are asked for a code, then set up your new phone straight away. If you have no recovery codes left, open a support ticket: we will verify it is you by other means. That takes longer than a code, deliberately, because anything faster would be a way in for someone else.