Secure your account with two-factor authentication and passkeys

Under Settings → Personal → Security, turn on two-factor authentication with an authenticator app, add or remove passkeys, and change your password.

Settings → Personal → Security is where you protect your own Fuxam account: turn on two-factor authentication with an authenticator app, add passkeys to sign in without a password, and change your password. Every signed-in user has this page; changes only affect your own account.

Why it matters

A password alone is the weakest part of most accounts. With two-factor authentication, someone who learns your password still cannot sign in without the 6-digit code from your phone. Passkeys go one step further for daily use: you sign in with your device's fingerprint, face or PIN, and there is no password to type or steal.

Before you start

Requirement	Detail
Access	Open Settings, then Security under Personal in the Settings sidebar. No special permission is needed
Authenticator app	Any app that supports time-based one-time codes (TOTP), for example on your phone. Fuxam does not offer SMS codes or backup codes
Passkeys	A browser and device that support passkeys. If yours does not, the Add passkey button does not appear
Current password	Needed to change your password

Turn on two-factor authentication

Open Settings → Personal → Security. In the Two-Factor Authentication section, find the row Authenticator app.

Turn on the switch. The dialog Set up authenticator app opens and shows Preparing your setup… for a moment.

Step Scan QR code: open your authenticator app and scan the QR code. If you cannot scan it, open Or enter this key manually and type the key into your app.

Select Continue to verification.

Step Enter verification code: type the 6-digit code your app shows now, then select Verify and enable.

You see Two-factor authentication enabled ("Your account is now protected with an authenticator app."). Select Close. The Authenticator app switch is now on.

From now on, when you sign in with your password, Fuxam asks for the 6-digit code from your authenticator app (Two-factor authentication screen). The screen can also offer Use passkey instead if you have added a passkey.

When your institution requires two-factor authentication

Your administrator can require two-factor authentication for your role or for your account. If it is required and you have not set it up yet, Fuxam sends you to the full-screen setup Two-factor authentication required ("Your institution requires authenticator-app two-factor authentication. Complete setup to continue.") before you can use the dashboard. The steps are the same: scan the QR code, select Continue to verification, enter the code, select Verify and enable, then Continue to dashboard.

While it is required, the Authenticator app switch stays on and is locked, with the note Your institution requires two-factor authentication. You cannot disable it.

Turn off two-factor authentication

Open Settings → Personal → Security.

Turn off the Authenticator app switch. Fuxam may ask you to confirm your identity again.

You see Two-factor authentication has been disabled. Your sign-in goes back to password (or passkey) only.

You cannot do this while your institution requires two-factor authentication for you. If you lost your phone, ask an administrator to reset it for you — see Require and manage two-factor authentication for users.

Add and manage passkeys

Open Settings → Personal → Security and go to the Passkeys section. With no passkeys yet, it shows No passkeys yet.

Select Add passkey. Your browser or device asks you to confirm with your fingerprint, face, PIN or security key.

When it works, you see Passkey added successfully. and the passkey appears in the list.

On the sign-in page you can then choose Continue with a passkey instead of typing your password. After you sign in with a password, Fuxam may also offer Sign in faster next time with Add passkey or Not now.

To manage a passkey, open the … menu (Passkey options) on its row:

Rename opens Rename passkey. Enter a Passkey name you will recognise (for example "Work MacBook" or "Personal phone") and select Save.
Remove asks Remove passkey? Confirm with Remove. You can no longer sign in with that passkey on that device.

Change your password

Open Settings → Personal → Security and scroll to the Password section ("Update your account password.").

Enter your Current Password.

Enter a New Password. It must have at least 10 characters with one uppercase letter, one lowercase letter, one number and one special character, and it must not be easy to guess. If it does not meet the rules, a hint appears under the field.

Enter the same password again in Confirm Password. If they differ, you see Passwords do not match.

The bar You have unsaved changes appears. Select Save (or Discard to clear the fields). On success you see Password changed successfully and the fields are emptied.

Common pitfalls

Pitfall	What happens	What to do
Code typed after it changed	The verification code is incorrect. Please try again.	Codes change every few seconds. Enter the code your app shows right now
No Add passkey button	Your browser or device does not support passkeys	Try a current browser on a device with a fingerprint, face or PIN unlock
"This device already has a passkey for your account."	You already added a passkey on this device	Use the existing passkey, or remove it first and add it again
Switch locked on	Two-factor authentication is required for you	Ask your administrator if it should not be required
Failed to change password with "Your current password is incorrect."	The current password was wrong	Re-enter your current password
"Your new password is insecure."	The new password is known to be unsafe or too weak	Choose a different, longer password

FAQ

Which authenticator apps work?

Any app that creates time-based 6-digit codes (TOTP) from a QR code. Fuxam does not send codes by SMS and does not offer backup codes.

I lost the phone with my authenticator app. What now?

You cannot turn off two-factor authentication without signing in. Ask an administrator in your institution to disable it for your account. If it is still required, you set it up again on your next visit.

Do passkeys count as two-factor authentication?

No. A passkey is a password-free way to sign in. If your institution requires two-factor authentication, you still need the authenticator app.

Does two-factor authentication apply in every institution I belong to?

The requirement is set per institution. An institution that requires it shows the setup screen; another one without the requirement does not.

Require and manage two-factor authentication for users

For administrators: require 2FA for a role or for users, and reset it.

Choose how you get notifications

The other personal settings page: email, push and in-app per notification.

Connect the MCP Server

Personal AI settings under Settings → Personal → AI.

Single sign-on (SSO)

How your institution can connect its own sign-in.