After your email and password, Ticklio asks for a code from an authenticator app on your phone (Google Authenticator, Microsoft Authenticator, 1Password…). Somebody who learns your password still cannot get in.

Setting it up

1. Open Profile → Authenticator app → Set up (the menu behind your initials).
2. Scan the QR code with the app.
3. Type the current code to confirm.
4. Write down the recovery codes and keep them somewhere other than your phone.

A new or lost phone

• With the old phone: turn it off under Profile and set it up again on the new one.
• Without phone and codes: ask an administrator to reset two-factor sign-in, then set it up again.

Administrators must use it; everybody else can switch it on and should.