Setting up two-factor sign-in

Two-factor sign-in protects your account even if your password becomes known. It is available for all roles — and strongly recommended for accounts with access to several tenants.

Setting it up

  1. Open Mein Profil and then Zwei-Faktor-Anmeldung verwalten.

  2. Choose Jetzt einrichten.

  3. Scan the QR code with your authenticator app. If that is not possible — for example because you are on the same device — enter the key shown next to it manually. Both lead to the same result.

  4. Enter the six-digit code from the app and choose Aktivieren.

Nothing is armed until you activate. Abbrechen discards the setup completely.

Saving your recovery codes

After activation, eight recovery codes appear. They are your way back in if you lose access to the app — a lost phone, for instance.

You see these codes only once. Each one works exactly once.

To save them:

  • Print / save as PDF — your browser’s print dialog offers both. The printout carries the account and date so the sheet can be identified later.

  • Copy to clipboard — to paste into your password manager.

Keep the codes like a password: in a safe or a password manager, not in your downloads folder and not in your inbox.

Ich habe sie gesichert hides the list. The page then always shows how many codes remain unused, and you can generate new ones — which invalidates the old ones.

Turning it off

Turning it off deliberately takes more than one click: a valid code as proof and explicit confirmation of the security notice. The action is logged.

In the public demo, two-factor sign-in is disabled for the example accounts — those accounts are shared by all visitors.