Two-factor authentication (2FA) adds a second layer of protection to your account. After you type your password, you enter a short code from another source you control. Even if someone learns your password, they cannot sign in without that second factor.

Kixie supports three ways to complete the second factor:

• Authenticator app
• Email code
• Passkey

This article walks you through setting each of them up and managing your options later.

First-Time Setup at Sign In

The next time you sign in with your password, Kixie will show a verification screen and ask you to enroll in 2FA.

Choose one of the following:

1. Authenticator app (recommended) – A one-time code refreshes every 30 seconds inside an app on your phone.
2. Email code – Kixie emails an 8-digit code to your account each time you sign in.

You can add a passkey after enrollment for faster sign-in.

Setting Up an Authenticator App

1. On the "How do you want to sign in?" screen, choose Authenticator app and click Continue.

2. 

3. Kixie displays a QR code and a set of recovery codes.
4. Open Google Authenticator, 1Password, Authy, or another authenticator app and scan the QR code.
5. If you can't scan the QR code, choose Enter code manually in your app and enter the setup code shown below the QR code.
6. Save your recovery codes by clicking Copy or Download. Store them somewhere safe, such as a password manager. Each recovery code can only be used once.
7. Enter the current 6-digit code from your authenticator app and click Continue.

You're now enrolled. Future sign-ins will require a fresh code from your authenticator app.

Setting Up Email 2FA

1. On the "How do you want to sign in?" screen, choose Email and click Continue.
2. Kixie displays your recovery codes.
3. Save your recovery codes by clicking Copy or Download and storing them somewhere safe.
4. Click I've saved them, continue.

You're now enrolled. Each time you sign in, Kixie will email you an 8-digit verification code.

Signing In Going Forward

Using an Authenticator App

1. Enter your email and password.
2. Open your authenticator app.

3. Enter the current 6-digit code.

   

4. Click Continue.

Using Email

1. Enter your email and password.
2. Check your email for the 8-digit verification code.

3. Enter the code.
4. Click Continue.

Using a Passkey

If you've registered a passkey, Kixie automatically prompts your device (Touch ID, Face ID, Windows Hello, or a hardware security key).

1. Enter your email and password.
2. Approve the biometric or PIN prompt.
3. You're signed in.

If the prompt doesn't appear or you cancel it, you can still use your authenticator app or email code.

Using a Recovery Code

Use a recovery code if you no longer have access to your normal authentication method.

1. Enter your email and password.
2. Click Use a recovery code instead.
3. Enter one of your saved recovery codes.
4. Click Continue.

Each recovery code can only be used once. After using one, it's recommended that you generate a new set.

Managing Your 2FA Settings

Go to My Profile and scroll to the Two-factor authentication section.

From there, you can:

• Change your primary authentication method
• Generate new recovery codes
• Add a passkey
• Remove a passkey

For any of these actions, Kixie first asks you to verify using your current 2FA method.

Adding a Passkey

1. Click Add passkey.

2. Verify using your current 2FA method.
3. Give the passkey a descriptive name (for example, Work Laptop or Personal Phone).
4. Follow your device's prompts to save the passkey.

You can register multiple passkeys across different devices.

Removing a Passkey

1. Locate the passkey you want to remove.
2. Click Remove.
3. Verify using your current 2FA method.

Removing a passkey immediately invalidates it.

Changing Your Primary Method

1. Click Change method.

2. Verify with your current 2FA method.
3. Select your new primary method (Authenticator app or Email).
4. Complete setup.
5. Save your new recovery codes.

Changing your primary method does not remove any existing passkeys.

Generating New Recovery Codes

If you've used some of your recovery codes or simply want a fresh set:

1. Click Generate new recovery codes.
2. Verify using your current 2FA method.
3. Save the new set of ten recovery codes.

Generating new recovery codes immediately invalidates all previous ones.

Troubleshooting

I lost my authenticator app or phone

Use a recovery code to sign in, then update your authentication method. If you've also lost your recovery codes, contact Kixie Support.

I'm not receiving my email verification code

Check your Spam or Junk folder. If necessary, sign in using a recovery code. If email delivery is unavailable, contact Kixie Support.

My passkey prompt doesn't appear

Cancel the sign-in flow and try again. Some browsers only display passkey prompts when the window is active. If necessary, use your authenticator app or email code instead, then remove and re-add the passkey.

I'm locked out and don't have my recovery codes

Contact Kixie Support with proof of identity. Support can reset your 2FA enrollment so you can enroll again.