Set up two-factor authentication and a passkey
Protect your account with an authenticator app or a passkey and keep your backup codes safe.
SecurityBasic (free)Checked on 30.10.2026
Prerequisites
- You are signed in
- For the app: an authenticator app (for example Aegis, FreeOTP or your password manager)
- For the passkey: a device with fingerprint, face or PIN
Who may do this?
Anyone can set up both for their own account. It is optional but recommended for everyone; it is mandatory only for platform administration.
Step by step
Open the area
Open “Settings → Sign-in & security” and find “Two-factor authentication” and “Passkeys”.
Set up the authenticator app
Under “Two-factor authentication” choose “Start setup”. In your app create a new entry “manually” or “by key” and enter the secret shown (there is deliberately no QR code). Enter the six-digit “Code from the app” and choose “Finish setup”.
Save the backup codes
You receive backup codes. Print them, save them as a text file or store them in your password manager, tick “I’ve saved the codes” and hide them. After that they can no longer be shown.
Add a passkey
Under “Passkeys” choose “Add passkey”, give it a name (for example “Phone”), confirm with your password and choose “Create passkey”. Your device then asks for fingerprint, face or PIN.
Sign in later
When signing in, use “Sign in with a passkey” or enter the code from the app in addition to your password.
You can find the feature here: /einstellungen/sicherheit
Common errors and solutions
- Phone lost, no access to the app.
- In the second step enter one of your backup codes instead of the code (format ABCD-EFGH). Each works exactly once. Afterwards you can generate new backup codes (“Generate new backup codes”, requires your password) or end two-factor authentication with “Turn off” and set it up again.
- “This browser does not support passkeys.”
- Use a current browser or device; the authenticator app works independently of that.
- Neither phone nor backup codes.
- For security reasons we cannot simply unlock the account – write to us via the support form and we will check the case manually.
Good to know
- You can store up to ten passkeys (phone, laptop …); ideally on two devices. Your password stays as a fallback.
- Backup codes do not count as a second factor for mandatory cases in platform administration; there you need a passkey or the app.
- Keep the backup codes apart from your phone – not as a photo in the cloud and not in an email. CLUP.life never asks for them.