Turn on two-step sign-in

Add a second step after your email code: an authenticator app or a passkey. Meeting officers who run the vote need it.

Two-step sign-in means someone who gets into your email still can't sign in as you. After your email code, you also use something only you have:

• An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password. It shows a new 6-digit code every 30 seconds.
• A passkey: Face ID, Touch ID, Windows Hello, your phone or a security key.

Turn it on

1. Sign in, then choose Account at the top of the page (or go to the Account security page).
2. Choose Set up an authenticator app.
3. In the app, add an account and scan the QR code. If you can't scan it, type the key shown under it.
4. Type the 6-digit code the app shows, then choose Turn on two-step sign-in.
5. Save your recovery codes. Copy or download them and keep them somewhere safe, like a password manager. Each one gets you in once if you lose your phone.

To use a passkey instead (or as well), type a name for it under Passkeys and choose Add a passkey. Your device asks you to confirm with your face, fingerprint or PIN.

Signing in with two steps

1. Enter your email and the code we email you, as usual.
2. Then enter the code from your authenticator app, or choose Use a passkey.

Lost your phone? Choose Use a recovery code instead. If you have no recovery codes left, contact JPC to reset it.

Good to know

• Each authenticator code and each recovery code works only once.
• New recovery codes gives you a fresh set; the old ones stop working.
• Changing or removing your second step needs a sign-in that used it.
• Sign out everywhere on the same page signs you out on every device.