--- title: Secure your account with two-factor authentication and passkeys description: >- Under Settings → Personal → Security, turn on two-factor authentication with an authenticator app, add or remove passkeys, and change your password. sidebar: order: 12 --- **Settings → Personal → Security** is where you protect your own Fuxam account: turn on two-factor authentication with an authenticator app, add passkeys to sign in without a password, and change your password. Every signed-in user has this page; changes only affect your own account. :::tip The page opens with the notice **This is your personal space**. Anything you change here applies to you only. Institution-wide options live under **Organization** in the same Settings sidebar. ::: ## Why it matters A password alone is the weakest part of most accounts. With two-factor authentication, someone who learns your password still cannot sign in without the 6-digit code from your phone. Passkeys go one step further for daily use: you sign in with your device's fingerprint, face or PIN, and there is no password to type or steal. ## Before you start | Requirement | Detail | |---|---| | Access | Open **Settings**, then **Security** under **Personal** in the Settings sidebar. No special permission is needed | | Authenticator app | Any app that supports time-based one-time codes (TOTP), for example on your phone. Fuxam does not offer SMS codes or backup codes | | Passkeys | A browser and device that support passkeys. If yours does not, the **Add passkey** button does not appear | | Current password | Needed to change your password | ## Turn on two-factor authentication 1. Open **Settings → Personal → Security**. In the **Two-Factor Authentication** section, find the row **Authenticator app**. 2. Turn on the switch. The dialog **Set up authenticator app** opens and shows **Preparing your setup…** for a moment. 3. Step **Scan QR code**: open your authenticator app and scan the QR code. If you cannot scan it, open **Or enter this key manually** and type the key into your app. 4. Select **Continue to verification**. 5. Step **Enter verification code**: type the 6-digit code your app shows now, then select **Verify and enable**. 6. You see **Two-factor authentication enabled** ("Your account is now protected with an authenticator app."). Select **Close**. The **Authenticator app** switch is now on. From now on, when you sign in with your password, Fuxam asks for the 6-digit code from your authenticator app (**Two-factor authentication** screen). The screen can also offer **Use passkey instead** if you have added a passkey. ### When your institution requires two-factor authentication Your administrator can require two-factor authentication for your role or for your account. If it is required and you have not set it up yet, Fuxam sends you to the full-screen setup **Two-factor authentication required** ("Your institution requires authenticator-app two-factor authentication. Complete setup to continue.") before you can use the dashboard. The steps are the same: scan the QR code, select **Continue to verification**, enter the code, select **Verify and enable**, then **Continue to dashboard**. While it is required, the **Authenticator app** switch stays on and is locked, with the note **Your institution requires two-factor authentication. You cannot disable it.** ## Turn off two-factor authentication 1. Open **Settings → Personal → Security**. 2. Turn off the **Authenticator app** switch. Fuxam may ask you to confirm your identity again. 3. You see **Two-factor authentication has been disabled.** Your sign-in goes back to password (or passkey) only. You cannot do this while your institution requires two-factor authentication for you. If you lost your phone, ask an administrator to reset it for you — see [Require and manage two-factor authentication for users](/docs/fuxam-web/base/user-management/two-factor-authentication). ## Add and manage passkeys 1. Open **Settings → Personal → Security** and go to the **Passkeys** section. With no passkeys yet, it shows **No passkeys yet**. 2. Select **Add passkey**. Your browser or device asks you to confirm with your fingerprint, face, PIN or security key. 3. When it works, you see **Passkey added successfully.** and the passkey appears in the list. On the sign-in page you can then choose **Continue with a passkey** instead of typing your password. After you sign in with a password, Fuxam may also offer **Sign in faster next time** with **Add passkey** or **Not now**. To manage a passkey, open the **…** menu (**Passkey options**) on its row: - **Rename** opens **Rename passkey**. Enter a **Passkey name** you will recognise (for example "Work MacBook" or "Personal phone") and select **Save**. - **Remove** asks **Remove passkey?** Confirm with **Remove**. You can no longer sign in with that passkey on that device. :::info Passkeys let you sign in without a password. They do **not** replace two-factor authentication when your institution requires it. ::: ## Change your password 1. Open **Settings → Personal → Security** and scroll to the **Password** section ("Update your account password."). 2. Enter your **Current Password**. 3. Enter a **New Password**. It must have at least 10 characters with one uppercase letter, one lowercase letter, one number and one special character, and it must not be easy to guess. If it does not meet the rules, a hint appears under the field. 4. Enter the same password again in **Confirm Password**. If they differ, you see **Passwords do not match**. 5. The bar **You have unsaved changes** appears. Select **Save** (or **Discard** to clear the fields). On success you see **Password changed successfully** and the fields are emptied. ## Common pitfalls | Pitfall | What happens | What to do | |---|---|---| | Code typed after it changed | **The verification code is incorrect. Please try again.** | Codes change every few seconds. Enter the code your app shows right now | | No **Add passkey** button | Your browser or device does not support passkeys | Try a current browser on a device with a fingerprint, face or PIN unlock | | "This device already has a passkey for your account." | You already added a passkey on this device | Use the existing passkey, or remove it first and add it again | | Switch locked on | Two-factor authentication is required for you | Ask your administrator if it should not be required | | **Failed to change password** with "Your current password is incorrect." | The current password was wrong | Re-enter your current password | | "Your new password is insecure." | The new password is known to be unsafe or too weak | Choose a different, longer password | ## FAQ **Which authenticator apps work?** Any app that creates time-based 6-digit codes (TOTP) from a QR code. Fuxam does not send codes by SMS and does not offer backup codes. **I lost the phone with my authenticator app. What now?** You cannot turn off two-factor authentication without signing in. Ask an administrator in your institution to disable it for your account. If it is still required, you set it up again on your next visit. **Do passkeys count as two-factor authentication?** No. A passkey is a password-free way to sign in. If your institution requires two-factor authentication, you still need the authenticator app. **Does two-factor authentication apply in every institution I belong to?** The requirement is set per institution. An institution that requires it shows the setup screen; another one without the requirement does not. ## Related pages **[Require and manage two-factor authentication for users](/docs/fuxam-web/base/user-management/two-factor-authentication)** For administrators: require 2FA for a role or for users, and reset it. **[Choose how you get notifications](/docs/fuxam-web/settings/notifications)** The other personal settings page: email, push and in-app per notification. **[Connect the MCP Server](/docs/fuxam-web/settings/connect-mcp-server)** Personal AI settings under Settings → Personal → AI. **[Single sign-on (SSO)](/docs/fuxam-web/settings/single-sign-on)** How your institution can connect its own sign-in.