How do you set up two-factor authentication?
Open the 'Two-step verification' section in your profile, pick an authenticator app, security key or passkey, and store your backup codes.
- Sign in on ohhi.nl and open the "Two-step verification" section in your profile, or go straight to the settings page.
- Pick an authenticator app (scan the QR code and confirm the first code), a security key or passkey, or both. Several keys side by side work too.
- Store the ten backup codes you get during setup, for instance in your password manager. Each code works once and is your spare entrance if you lose your phone or key.
An authenticator app shows a new six-digit code every thirty seconds, which you type over when signing in. A security key or passkey (YubiKey, Touch ID, Windows Hello or a passkey on your phone) is confirmed with a touch or your fingerprint; it is bound to the domain, so on a fake sign-in page the key simply does not work.
From then on every new sign-in asks for the second step. If you lose both your second step and your backup codes, you can no longer sign in on your own; so keep the codes somewhere other than just your phone. The background to these methods is in secure your account with two-factor authentication.