Two-factor codes and recovery codes
Add a six-digit code from an authenticator app after the email link, and keep recovery codes for the day your phone is gone.
Two-factor codes add a second step when you sign in with an email link. Whoever gets into your mailbox still can't get into Laberty without your phone.
Turn it on
- Go to Admin → Security, and under Authenticator codes (2FA) press Set up authenticator codes.
- Scan the QR code with any authenticator app: Google Authenticator, 1Password, Authy and others all work. Can't scan? Type the key shown next to the code into the app instead.
- Type the six-digit code the app shows, and press Finish setup.
- Laberty shows your recovery codes. Save them now: they aren't shown again.
Signing in afterwards
After you tap the email link, you'll see One more step. Type the six-digit code your app shows right now.
- Codes change every 30 seconds. If one is refused, wait for the next.
- Signing in with a passkey doesn't ask for a code. A passkey is already strong enough on its own.
- After several wrong codes, Laberty asks you to wait a minute before trying again.
Recovery codes
Recovery codes get you in when your phone isn't available.
- You get 8 codes, each like
K7PQ-2M9X. Each one works once. - On the code step, tap Use a recovery code and type one.
- The Security page shows how many you have left.
- Generate a new set replaces all of them. The old codes stop working straight away.
Keep them somewhere that isn't your phone: printed and put away, or in a password manager.
Turning it off
On the Security page, press Turn off under Authenticator codes.
Lost your phone and your recovery codes?
Still stuck?
Contact support and tell us what you tried. We reply by email, usually within 1–2 business days.