Two-step sign-in adds a second check to signing in: after your password, you confirm a code or a device that only you hold. You set up and manage these methods on your Account's Sign-in view, and you make recovery codes as a fallback for the times you lose your usual device.
Supported methods
Your Account's Sign-in view lists the ways to sign in your organisation allows, the easiest on a phone first. Each shows a short note on how it works and a Set up button:
- Passkey — Face ID, a fingerprint or your device's PIN.
- Authenticator app — a code from an app such as Google Authenticator.
- Email code — a code sent to your email.
Which of these appear depends on the verification methods your organisation enables. An administrator sets that on the organisation's security settings, which also decide whether two-step sign-in is off, asked for by a date, or required.
An authenticator app or a passkey stays with a device you carry, so it keeps working even when you have no mobile signal. Email codes are convenient, but they depend on you being able to reach that inbox.
If your organisation signs in through single sign-on (SSO), your identity provider can satisfy the second step, and you set up any extra factors with your provider rather than in Pyron.
Enrolment
You reach your Account's Sign-in view from your account menu in the header — the round avatar at the top labelled "Your account" — which also opens the rest of your account settings.
To turn on a method:
- Open your account menu in the header and go to your security settings.
- Find the way you want and select Set up next to it.
- Follow the prompts:
- For a passkey, choose Use a passkey and confirm with Face ID, a fingerprint or your PIN when your device asks.
- For an authenticator app on a phone, choose Open authenticator app to add Pyron to the app, or Copy key to paste it in. On a computer, scan the code with your app instead. Then enter the 6-digit code the app shows and choose Verify.
- For an email code, confirm the address, then enter the code Pyron sends you.
- Pyron confirms the method once it verifies your code or device. It then counts as set up, and you can turn it off again from the same place.
If your organisation requires two-step sign-in, a page titled "Keep your account safe" asks you to choose a way before you can continue: Use a passkey (Face ID, fingerprint or PIN), Use an authenticator app or Use an email code. Setting up more than one gives you a way in if a single method becomes unavailable. From then on, Pyron asks for your second factor each time you sign in.
Backup codes
Recovery codes are your backup way into Pyron when you cannot use your usual second factor — for example, if you lose the phone that runs your authenticator app. The recovery codes section of your Account's Sign-in view, shown once a way to sign in is on, explains this and says how many codes you have left.
To make a set, select Make codes. Store the codes somewhere safe and private, kept apart from the device that runs your other methods, since they let anyone who holds them past the second step. Each code works once.
Make new codes stops any set you made before working, so Pyron asks first. Save the codes you are shown right away, and update anywhere you kept the earlier ones.
If you use up your recovery codes and lose your second factor as well, you can be locked out. An administrator can reset your two-step sign-in so you can set it up from scratch and sign in again.