Two-step login

Two-step login means signing in takes your master password and something only you have, like a code from your phone. If someone learns your master password, they still can't get in.

• Required for Owners, Admins and Managers of a region's vault. Until it's on, you'll get a reminder email every morning.
• Recommended for everyone else.

Turning it on (about two minutes)

1. Sign in at passwords.f3nation.com.
2. Go to Settings > Security > Two-step login.
3. Pick one:
   • Authenticator app: install one on your phone (Google Authenticator, Microsoft Authenticator, 2FAS or Ente Auth all work), click Manage, scan the QR code, and enter the 6-digit code it shows.
   • Passkey / FIDO2 WebAuthn: use your phone's or computer's passkey, or a security key.
4. Save the recovery code it gives you somewhere safe outside the vault (printed, or in your personal password manager).

Email codes aren't available on this server, on purpose: anyone who gets into your email could otherwise get into the vault too.

Lost your phone or security key?

Use your recovery code on the sign-in screen: it turns two-step login off so you can sign in and set it up again. If you've lost the recovery code too, see Getting help.