Skip to content

Turn on two-step sign-in

Add a code from an authenticator app to your password, so your account stays safe even if your password leaks.

What it is

Two-step sign-in asks for a second thing after your password: a 6-digit code from an authenticator app on your phone. The code changes every 30 seconds. Someone who learns your password still can’t get in without your phone.

You’ll need an authenticator app, such as Google Authenticator, 1Password or Authy.

Turn it on

  1. Open the account menu (your initial, top right) and choose Your account, then Security.
  2. In the Two-step sign-in card, press Turn on two-step sign-in.
  3. Type Your password and press Continue. This makes sure it’s you.
  4. Scan the QR code with your authenticator app. Can’t scan? Type the key shown under it into the app instead.
  5. Type the 6-digit code the app shows, and press Turn on.
  6. Save your 10 backup codes. Use Copy or Download, keep them somewhere safe, then press I’ve saved them.

The card now shows an On badge.

Your backup codes

Backup codes let you in if you lose your phone or can’t open the app. Each one works once. They look like abcde-12345.

Keep them somewhere other than your phone: a password manager, or a printed copy. If you’ve used most of them, or think someone else has seen them, press New backup codes in the same card. You’ll need your password, and the old codes stop working.

If you lose both your phone and your backup codes, write to hello@crustat.com.

Signing in with it on

After your email and password, Crustat asks you to Enter your code. Open your authenticator app, type the code for Crustat, and press Sign in.

  • Trust this device for 30 days: tick it on your own computer and you won’t be asked for a code there for 30 days.
  • Use a backup code: switch to a backup code instead. Use the app instead switches back.
  • The code step lasts 10 minutes. Wait longer and you’ll see “That sign-in timed out. Sign in again.”

Turn it off

In the Two-step sign-in card, press Turn off and type your password.

If you sign in with Google

Two-step sign-in in Crustat is for signing in with a password. If you only use Continue with Google, Google’s own two-step verification protects you: turn it on in your Google account.

Want both? Add a password under Security → Add a password first. Then you can turn on two-step sign-in for it.

Still stuck? Write to hello@crustat.com.

All articles
The mascot waiting

Almost ready

We're opening to everyone soon.

Crustat is in its final checks before we open sign-ups. Leave your email and we'll write once, the day it opens, with your 14 days free waiting.

One email when we open. No newsletter. See our privacy page.