Sign-in security
Add a second step to web sign-in with an authenticator app or a passkey, keep recovery codes for a lost phone, sign in with Google or Microsoft, and let your company require it for everyone.
What two-step sign-in is
With two-step verification on, signing in to the TeamTrackin web app needs your password and a second step only you have. Even if someone learns your password, they can't get in. Every plan
Turning it on
You can add more than one authenticator app or passkey — handy for a phone and a laptop. To turn two-step verification off, choose Turn off two-step verification and enter a current code to confirm it's you. This removes your authenticator apps, passkeys and recovery codes.
Signing in
After your password, enter the code from your app or use your passkey. If you don't have either to hand, choose Use a recovery code.
Two-step verification protects sign-in to the web app. The desktop tracker and mobile app keep using their own sign-in.
Recovery codes
Recovery codes are shown once when you turn two-step verification on. Each code works one time. If you use a few or think someone has seen them, open Settings → Sign-in security and choose Get new recovery codes — the old ones stop working.
Lost your phone and your recovery codes? Ask your company admin or contact support to help you get back in.
Google and Microsoft sign-in
People can sign in to the web app and the desktop tracker with Continue with Google or Continue with Microsoft when their Google or Microsoft account uses the same email as in TeamTrackin. Google or Microsoft checks the person, so TeamTrackin's own two-step step is skipped.
| Setting | What it does |
|---|---|
| Password, Google, Microsoft | Company → Company Info → Sign-in security → Ways to sign in. Turn each one on or off for the whole company. |
| Password off (Premium and up) | Everyone signs in with Google or Microsoft. The account owner can still use their password and two-step verification, and the mobile app keeps using passwords for now. |
| New people | Invite them as usual with the email they use for Google or Microsoft. Their first Google or Microsoft sign-in links the account. |
Everyone keeps their TeamTrackin password for the vault, which is encrypted with it. After a Google or Microsoft sign-in the vault asks for that password once.
Requiring it for the company
Admins can make two-step verification compulsory for web sign-ins. Open Company → Company Info and turn on Require two-step verification on the web in the Sign-in security card.
| Who | What happens |
|---|---|
| People who already use it | Nothing changes. They sign in with their app, passkey or recovery code as usual. |
| People who don't yet | At their next web sign-in they're asked to set it up — scan the QR code, save their recovery codes, then Turn on and sign in. |
| Everyone | While it's required, nobody can turn it off for themselves. Settings shows “Required by your company”. |
Permission: Groups & permissions → Company Info → Sign-in security: Manage. Admins have it by default.
Keep your account yours
Two-step sign-in is included on every plan. Turn it on in Settings in under a minute.