Two-factor adds a second check on top of your password: a passkey, or a six-digit code from an app on your phone. It is on for every Bizomate account, so the first time you sign in — after creating an account, joining from an invitation or accepting an ownership offer — Bizomate asks you to set it up before you go any further.

Who can do this

Everyone, the first time they sign in. It takes three steps, shown at the top of the page: Choose, Set up and Save codes.

Before you start

  • For a passkey: a device with a fingerprint reader, face unlock or a PIN, and a browser that supports passkeys.
  • For an authenticator app: an app on your phone, such as Google Authenticator or Microsoft Authenticator.

Steps

  1. Sign in with your email and password. Set up two-factor opens.
  2. Choose a method:
    • Passkey (marked Recommended) — your fingerprint, face or device PIN. Nothing to install, nothing to type, and it can't be phished.
    • Authenticator app — a six-digit code from an app on your phone.
  3. Select Continue (it reads Continue with a passkey or Set up the authenticator app, depending on your choice).

With a passkey

  1. Create your passkey opens, and your browser's own prompt appears straight away. The page shows Waiting for your device.
  2. Confirm with your fingerprint, face or device PIN. Passkey saved opens, showing the device it was saved on and whether it syncs across your devices or stays on this device only.
  3. Select Continue to recovery codes.

With an authenticator app

  1. Set up your authenticator opens with a QR code.
  2. Open your authenticator app, add an account, and scan the QR code.
    • Cannot scan? Select Copy beside the key under Cannot scan? Type this key into the app instead, and type it into the app.
  3. Type the six-digit code the app shows into the six boxes under Code from the app. You can paste the whole code into the first box.
  4. Select Verify and continue.

Save your recovery codes

  1. Save your recovery codes opens with ten codes. A banner says This is the only time these codes are shown. After this page you can only replace them, not see them again.
  2. Save them: select Download .txt to save a file called bizomate-recovery-codes.txt, or Copy all and paste them into your password manager.
  3. Select I have saved them, continue.

Bizomate finishes signing you in. If you are new, Create a workspace opens next; if you joined from an invitation, the workspace opens.

What happens next

  • Your two-factor method shows under Settings > Two-factor, with 10 of 10 left beside Recovery codes.
  • From now on, every sign-in with a password asks for this method. A passkey can also sign you in on its own, without the password.

Good to know

  • You cannot skip this or turn two-factor off. It is required on every account.
  • Ten recovery codes, each works once. Keep them where you keep passwords, not in your inbox. You can make a new set later in Settings, which cancels this one.
  • A passkey saved to iCloud Keychain or Google Password Manager works on your other devices too. One saved on the device only works there — add another from Settings if you sign in elsewhere.
  • Add the other method later. Whichever you choose now, you can add the other from Settings > Two-factor. Having two means losing one device does not lock you out.
  • Codes change every 30 seconds. Enter the one showing now.
  • Under the form, Signed in as rohan@consulace.com. with Sign out lets you stop and sign in as someone else.

If something goes wrong

What you see Why What to do
This device can't create a passkey — The browser is too old, or the device has no fingerprint reader, face unlock or PIN set up. The browser or device does not support passkeys. Select Set up the authenticator app. You can add a passkey later on a device that supports them.
The passkey did not come through. Try again. or That passkey could not be used. Try again. You cancelled the prompt, or it timed out. Select Try again, or Use an authenticator app instead.
That code did not match. Codes change every 30 seconds, so enter the one showing now. If it keeps failing, check your phone sets its clock automatically. The code had expired, or your phone's clock is wrong. Enter the current code. Set your phone's date and time to automatic.
Enter the six-digit code. or The code is six digits. The code is missing or too short. Type all six digits.
You are sent back to Sign in The setup took too long and the partial sign-in ended. Sign in again; you start from Choose.