# Sign in safely: password, second step and passkeys

> Change your password, add a second sign-in step with an app or email codes, and sign in with a passkey.

**Security** is where you keep your account safe. To open it, select your name at the foot of the rail and choose **Security**. Taktyl may ask for your password first.

If you lead a workspace or run your organisation, a second sign-in step is required. Until you add one, Taktyl brings you to this page.

## Change your password

1. Under **Update password**, type your **Current password**.
2. Type a **New password** and type it again in **Confirm password**. It needs at least 12 characters, with upper and lower case letters, numbers and symbols.
3. Select **Save**.

## Use an authenticator app

1. Under **Two-factor authentication**, select **Enable 2FA**.
2. Scan the QR code with the authenticator app on your phone, or type the setup key into it. Select **Continue**.
3. Type the 6-digit code from the app and select **Confirm**.

From then on, Taktyl asks for a code from the app each time you sign in. Select **View recovery codes** and keep them in a password manager: they let you back in if you lose your phone. **Disable 2FA** turns it off.

## Use email codes

1. Under **Email codes**, select **Email me a test code**.
2. Type the six-digit code from the email and select **Turn on email codes**. The code works for 10 minutes; **Send a new code** sends another.

From then on, Taktyl emails you a code each time you sign in. **Turn off email codes** stops it. Email codes work beside your app and your passkeys.

## Add a passkey

A passkey lets you sign in without typing your password, using your device's fingerprint, face or PIN.

1. Under **Passkeys**, select **Add passkey**.
2. Give it a **Passkey name**, such as the device it is on.
3. Select **Register passkey** and follow your device's prompt.

To take one away, select **Remove** (the bin icon) beside it, then **Remove passkey**. If your browser cannot use passkeys, the page says so.