Two-factor sign-in
Set up an authenticator app, save your recovery codes, and keep access to your account if your phone is lost.
On this page
Two-factor sign-in adds a changing code from an authenticator app to your password. If someone learns your password, they still cannot sign in without access to that code.
You can find the feature under Account → Security. If Ebbe asks you to set it up directly after sign-in, the steps are the same as the ones below.
What you need
You need an authenticator app that can create one-time codes. This may be a separate app on your phone or a password manager with an authenticator built in. Ebbe uses the common six-digit codes supported by these apps.
If you already use an authenticator, you can add Ebbe to the same app. You do not need a particular provider or an Ebbe-specific app.
Turning it on
Open Account → Security, choose Turn on, and follow these steps:
- Confirm your current password.
- Scan the QR code with your authenticator app. If scanning is not possible, enter the setup key shown below it.
- Enter the six-digit code from the app to finish setup.
- Save the ten recovery codes somewhere safe before closing the final screen.
Nothing changes until Ebbe accepts the code in step three. Once setup is complete, your other signed-in browsers are signed out so they have to use the new sign-in method too.
The recovery codes
A recovery code lets you sign in when you cannot use your authenticator app. Each code works once, and Ebbe only shows the full set immediately after it is created.
Copy the codes into a password manager or write them down, then keep them separate from your phone. A screenshot stored only on that phone will not help if the phone is lost.
The Security tab shows how many codes remain. New recovery codes creates a fresh set of ten and immediately retires the old set, including any unused codes.
Signing in from then on
Enter your email address and password as usual. Ebbe then asks for the current six-digit code from your authenticator app. You can enter a recovery code in the same field when the app is unavailable.
If a code is refused, check that you copied it correctly and use the newest code shown in the app. After several unsuccessful attempts, begin the sign-in again with your password.
Turning it off
Under Account → Security, choose Turn off and confirm the change with your current password and a code. Your password will then be enough to sign in, and every recovery code will stop working.
If the phone is gone
Use one of your recovery codes in place of the app code. Once you are signed in, turn two-factor sign-in off and set it up again with your new phone.
If you have also lost the recovery codes, contact the person who runs Ebbe. They can help you regain access. If you receive an unexpected email saying that two-factor sign-in was turned off, change your password immediately and turn it back on.