Skip to content
Get started →

Contents

Two-factor authentication and passkeys

Last updated: October 16, 2026

What it does

Two-Factor Authentication is on the profile page, under Change Password. A badge at the top of the panel says whether you have a second factor set up.

With none set up, the panel offers Enable 2FA. With one, the Authenticator App row reads Enabled or Not configured, with Enable or Disable beside it.

Passkeys is the second half of the panel. It lists your passkeys by name and the date each was last used, and offers Add Passkey. A passkey signs you in without a password and counts as a second factor.

Setting up the authenticator app gives you backup codes, and so does your first passkey. They appear once. Copy and Download are beside them, and that step closes only when you select I’ve Saved These Codes.

Before you start

If you signed up through Google, you have no password. Those steps skip asking for one.

If you have a password, you need to enter it before adding or removing a factor. That includes deleting a passkey and turning off the authenticator app.

The Passkeys section only shows up in a browser that supports passkeys.

A Passkey Name can be up to 100 characters.

You can only see your backup codes while the setup panel is open. Save them then. You will not see them again. Each code works once.

Turning off the authenticator app removes it from your account. Setting it up again gives you a new set of backup codes.

How to use it

  1. Open Settings, then Profile, and scroll to Two-Factor Authentication.
  2. Select Enable 2FA. Enter your account password if Lucrii asks for it.
  3. Scan the QR code with your authenticator app, or copy the code shown beneath it.
  4. Select Enter Code, type the six-digit code, and select Verify.
  5. Copy or download the backup codes, then select I’ve Saved These Codes.
  6. To add a passkey, select Add Passkey, give the device a name, and follow your browser’s prompt.

Troubleshooting

The panel says your two-factor status could not be loaded. Lucrii cannot check it right now, so it treats your account as one that needs a password. Lucrii never asks you for a password you do not have.

  • Your profile: Edit your name, email, picture, personal email signature and password on the profile page.
  • Members and invitations: See everyone in your organisation, invite people with a role, reassign roles and revoke access.

Changes