Turn on two-step login

With two-step login, Vink asks for one more thing after your password. Someone who learns your password still can't sign in.

Two ways to use it

• Authenticator app: a 6-digit code from an app on your phone, such as Google Authenticator, 1Password or the Passwords app on an iPhone. The code changes every 30 seconds.
• Passkey: your face, fingerprint or screen lock on this device, with nothing to type.

Start with one and add the other later. Two-step login comes after a password, so if you sign in with Google or Apple only, set a password in Settings first.

Set it up

1. Open Settings and click Set up under Two-step login.
2. Choose Set up the app → or Add a passkey →. Vink asks for your password once. It holds for 10 minutes.
3. For the app: scan the QR code with your app, then type the code it shows for Vink and click Turn on. For a passkey: follow your device's prompt, then name the passkey.
4. Save your recovery codes, then click I've saved them.

When two-step login turns on, every other device is signed out, including the Vink app on your phone. Vink emails you about every change to it.

Save your recovery codes

You get ten recovery codes. Each one works once, and gets you in if you lose your phone or passkey. They're shown only once: click Copy or Download and keep them somewhere other than your phone.

Make new codes under Recovery codes replaces the old ones. Vink tells you when you have three or fewer left.

Signing in

After your password, Vink asks for the code from your app, or your passkey. It signs you in on the sixth digit. You have 10 minutes for this step. Signing in with Google or Apple asks for it too.

After 6 wrong codes, codes are stopped for 15 minutes, and Vink emails you that someone may have your password.

If you lose your phone

Click Use a recovery code on the sign-in page and type one of your codes. Then set up the app or a passkey again on your new device.

If you lost both your phone and your recovery codes, write to support@vinkjournal.com from the email address of your account.

Turn it off

Open Settings, click Manage under Two-step login, then Turn off… and Yes, turn it off. This removes the app, every passkey and the recovery codes. Signing in then needs only your password.