How to turn on two-factor sign-in with an authenticator app

When you sign in with a password, GetCalendario asks for a second step before it lets you in. By default that step is a code emailed to you. You can add an authenticator app (Authy, Google Authenticator, Microsoft Authenticator or similar) and use its codes instead. To do it, go to Settings, then the Security tab, then Authentication, and press Set up an authenticator app.

There are two second steps today: the emailed code and an authenticator app. A passkey, covered below, replaces the whole password-plus-code process.

Email code or authenticator app: what is the difference?

• Email code. On by default for every account. After your password, you choose "Email me a code" and type the code from your inbox. A code works for 10 minutes, and after five wrong guesses it is cancelled and you have to ask for a new one.
• Authenticator app. After your password, you type the six-digit code your app shows, with no waiting for an email. The page itself says that switching off the email code increases security.
• Passkey. Replaces your password and the second step together. See how to set up a passkey.

How do I set up an authenticator app?

1. Open Settings and choose the Security tab.
2. In Authentication, press Set up an authenticator app.
3. A dialog opens with three steps: Scan, Enter the code, Done. Open your authenticator app and scan the QR code. It appears as GetCalendario. If you cannot scan, enter the key shown under the code instead.
4. Enter the six-digit code your app shows. Authenticator sign-in is not on until you do this.

You get an email confirming the authenticator was turned on. If you close the dialog partway, the page shows "Authenticator setup isn't finished". Press Finish setting up, and delete the old GetCalendario entry from your app first, because you are given a new code to scan each time.

How do I stop using email codes?

Once the authenticator app is on, the Enable Email Two Factor Authentication? switch becomes available. Set it to off and press Save Authentication. Before the app is set up the switch is disabled, with the note that you can disable email codes once you have set up the app. With email codes off, signing in with your password asks for your authenticator code instead.

What are recovery codes?

Recovery codes are the way back in when you have lost your phone and your passkey. Press Generate recovery codes in the Recovery codes section of the Security tab. You get 10 single-use codes, shown once. Write them down somewhere that is not your phone, and use Copy all if you wish.

To use one at sign-in, choose Lost your phone? Use a recovery code, enter the code and press Use this code. Each code works once, and too many wrong tries make you wait a few minutes. Generate new codes replaces the whole set, and the old ones stop working immediately.

What to know

• Setting up an authenticator, adding a passkey and changing your password all need you to have passed your second step first, so someone who only knows your password cannot change how your account is protected.
• If you have an authenticator app or a passkey, emailed sign-in links are turned off for your account.
• If you lose your authenticator app and have no recovery codes or passkey, ask support. There is no way to turn an authenticator off yourself. Support can reset it after confirming who you are.
• A team can require two-factor sign-in for its members. See team policies.