Security

Security (/admin/security) protects your own sign-in with a second factor, and lets an admin require it of every admin in the organisation. Anyone with a signplume account can open it.

Set up two-factor sign-in

1. Scan the code on the screen with an authenticator app. If your app cannot scan it, enter the key shown beside it by hand (time-based, 6 digits).
2. Enter the 6-digit code the app shows.
3. Save the 10 recovery codes the screen then shows you. Each works once, if you lose your authenticator, and they are shown only this once.

From then on, signplume asks for a code from your app each time you sign in.

Recovery codes

The screen shows how many of your 10 codes are unused, and warns when 3 or fewer are left. Generate new recovery codes replaces the whole set: the old codes stop working, and the new ones are shown once.

Turn it off

Turn off two-factor switches it off for your own account. When your organisation requires two-factor for admins, an admin cannot turn it off here; an admin has to lift the requirement first.

Require two-factor for admins

Admins see a second card, Require two-factor for admins. When it is on, every admin in your organisation must set up two-factor sign-in. You have to set it up yourself before you can turn this on, so you cannot lock yourself out.