Two-step sign-in

Turn it on

1. Open the card

   Go to Profile, then the Security card called Two-factor sign-in.

2. Scan the code

   Scan the QR code with your authenticator app. If you cannot scan, type the key into the app by hand.

3. Confirm

   Type the 6-digit code the app shows.

4. Save your recovery codes

   CMSKite shows 10 recovery codes once. Store them somewhere safe.

Signing in

Every way of signing in stops after the first step and asks for a code. That includes Google, Apple, the emailed code and single sign-on. The sign-in expires after 10 minutes, and you get 5 attempts.

Type the code from your app. A code that you already used cannot be used again.

Recovery codes

• You get 10 codes, like abcde-fghjk.
• Each code works once. You can type it where the app code goes. Case and the dash do not matter.
• The card shows how many codes are left.
• Choose New codes to replace all of them. The old codes stop working.

Turn it off

Choose Turn off in the same card. CMSKite asks for an app code or a recovery code first. It asks for one for New codes too.

Deleting your account

With two-step sign-in on, deleting your account asks for an authenticator code. Without it, CMSKite sends a code by email.

See also

A workspace can require single sign-on. People who have two-step sign-in on still type their code after they sign in that way. See where people sign in on the Sessions card in Profile.