Secure your account with two-factor and passkeys

You secure your account in Settings → Security, where you can turn on two-factor authentication, save recovery codes and add passkeys. The page also shows how your sign-in is protected at the moment.

Turn on two-factor authentication

Two-factor authentication asks for a six-digit code from an app on your phone each time you sign in with a password, so a stolen password alone is not enough.

1. In Two-factor authentication, select Turn on two-factor authentication.
2. Scan the QR code with an authenticator app (such as Google Authenticator, 1Password or Authy), or type in the key shown.
3. Enter the Six-digit code from the app and select Turn it on.
4. Save your recovery codes (see below), then select Done.

We strongly recommend that the account owner turns this on before taking real payments.

Keep your recovery codes safe

When you turn on two-factor authentication, you get ten recovery codes. Each one works once, in place of a code from your app. They are only shown once, so select Copy to clipboard and store them somewhere safe, such as a password manager.

If you lose your phone, choose Lost your phone? Use a recovery code when you sign in.

To get a new set, select New recovery codes and enter a code from your authenticator app. The old codes stop working.

If you have lost your phone and all your recovery codes, contact support. We will need to confirm your identity before we can help.

Add a passkey

A passkey lets you sign in with your fingerprint, face or screen lock instead of a password.

1. In Ways to sign in, under Passkeys, select Add a passkey.
2. Give it a name if you like, such as "Shop laptop".
3. Follow your device's prompts.

You can Rename or Remove a passkey at any time.

Other ways to sign in

In Ways to sign in you can also:

• Change password or Set a password, using at least 12 characters;
• Connect a Google, Facebook or Apple account, if those are available, and Disconnect it later.

Keep at least two ways to sign in, so losing a phone or forgetting a password never locks you out. Hapro will not let you remove your last one.

Turning two-factor authentication off

Select Turn off. You will need your password and a code from your app or a recovery code.