What types of two-factor authentication (2FA) are supported?

Two-factor authentication (2FA) adds an extra layer of security to your account. We support two modern and secure methods:

• TOTP (Time-based One-Time Password): This is the familiar six-digit code that changes every 30 seconds, generated by an authenticator app like Google Authenticator, Microsoft Authenticator, or a password manager.
• Passkeys: A modern and highly secure replacement for passwords. Passkeys allow you to sign in using the same biometrics (fingerprint or face scan) or device PIN you use to unlock your computer or phone.

Some passkey providers, such as iCloud Keychain, Google Password Manager, and Windows Hello, support an advanced feature called PRF (Pseudo-Random Function). Also, most hardware security keys (like YubiKeys) support PRF.

If your passkey supports PRF, you can use it to log in without needing your password at all. The passkey itself securely generates the necessary encryption keys on your device, offering a seamless and even more secure login experience.