How to Turn On Two-Step Sign-In

Two-step sign-in asks for a six-digit code from an authenticator app after your password. Someone who learns your password still cannot sign in.

Before you start

You need an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator, Authy or 1Password.

Turn it on

1. Go to Settings → Security.
2. Select Set up two-step sign-in.
3. In your authenticator app, add an account and either scan the code on screen or type the key shown.
4. Enter the six-digit code the app shows, then select Turn on.
5. Save your eight recovery codes now. Each works once if you lose your phone. They are shown only once.

Sign in with it

After your password, DonorDesk asks for the code from your app. If you have lost your phone, enter one of your recovery codes instead.

Turn it off

1. Go to Settings → Security and select Turn off.
2. Enter your password and a current code, then confirm.

Good to know

• If your organisation signs in through single sign-on, your identity provider manages two-step sign-in, and the switch is not shown.
• After several wrong passwords, the account is locked for a short time. A correct sign-in, or a password reset, clears the lock.
• Keep the recovery codes somewhere safe that is not your phone.