Two-factor sign-in, backup codes and signed-in devices

Protect your account with an authenticator app, keep backup codes, remember trusted devices and sign out devices you don't recognise.

Two-factor sign-in asks for a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy and others) after your password.

## Who needs it
- Facility owners (admins) and Storage Reservations staff are asked to turn it on. New owner accounts have 14 days after sign-up; after that the dashboard opens the setup page until it's on.
- Managers, staff and renters can turn it on any time (recommended).
- Once two-factor sign-in is on for an owner or admin account, the code is always required.

## Set it up
1. Open Account security (/manage/security, or Profile → Security in the renter portal).
2. Click Set up, then scan the QR code with your app (or type the setup key).
3. Enter the 6-digit code to confirm.
4. Save your 10 backup codes. Each works once if you lose your phone. They're shown only once; you can make a new set any time (the old set stops working).

## Remember this device
Tick Remember this device for 30 days when you sign in to skip the code on that browser. You'll still need your password. You can forget all remembered devices on the security page.

## Signed-in devices
The security page lists every browser signed in to your account, with the approximate location (IP address) and when it was last used. Sign out any one, or all others at once. We'll email you when your account is used from a new device.

## Lost your phone?
Use a backup code to sign in, then set up the new phone. No backup codes? Contact Storage Reservations support; after we confirm it's you, an admin can reset two-factor sign-in for your account. Every reset is logged.

Text-message codes are not available yet.