Passkeys, two-factor and sign-in sessions

Your VICIfast login controls your servers and your billing, so it deserves more than a password. Add a passkey, turn on two-factor codes, or both, and check where you are signed in. It takes about five minutes.

What you need

• Your VICIfast password.
• For a passkey: a phone or computer with a fingerprint reader, Face ID or a screen lock, or a security key.
• For two-factor: an authenticator app such as 1Password, Authy or Google Authenticator.

These settings are for your own login. Each member of your team sets up their own.

Step 1: Open Security

1. In the left sidebar, under Settings, click Security. You can also click your avatar at the top right and choose Security.
2. The page has three cards: Passkeys, Two-factor authentication and Active sessions.

Step 2: Add a passkey

A passkey lets you sign in with your fingerprint, Face ID or a security key, with no password and no code to type.

1. On the Passkeys card, click Add a passkey.
2. In Name this passkey, type something you will recognise, such as “Work laptop”.
3. Click Continue. Your browser asks for your fingerprint, Face ID or security key. Confirm it.
4. You see “Passkey added.” The passkey is listed with the date it was added and when it was last used.

Next time, click Sign in with a passkey on the sign-in window. A passkey skips the two-factor code too.

Step 3: Turn on two-factor authentication

1. On the Two-factor authentication card, click Enable two-factor auth.
2. Type your password in Confirm password and click Continue.
3. Scan the QR code with your authenticator app (or type the key shown under it).
4. Under Save these backup codes, click Copy all or Download .txt and keep the codes somewhere safe. Each code works once, and you won't see them again after this step.
5. Type the 6-digit code from your app in Verification code and click Confirm and enable.

The card now reads Enabled. From now on you are asked for a code at every sign-in. If your phone isn't with you, click Use a backup code instead on the code screen.

Step 4: Check where you are signed in

1. Look at Active sessions. Each row shows the device, its IP address and when the session started. Your current one is marked This session.
2. Don't recognise one? Click Revoke on that row.
3. To sign out everywhere except here, click Sign out everywhere else.

As the account owner, you can also see your members' sign-ins on the Members page, under Sign-in activity, and end one with Force logout.

Change or remove later

• New backup codes: on the two-factor card, type your Password and click Regenerate backup codes. The old codes stop working at once.
• Turn off two-factor: type your Password, click Turn off two-factor, then Turn it off. Your sign-in goes back to password only.
• Remove a passkey: click Remove on its row, then Remove passkey. If it is your last one, you go back to password sign-in (and two-factor, if it is on).

If something goes wrong

Related articles

• Invite your team and choose what they see
• Export or delete your data
• Get help: chat, email and this help center