Two-factor authentication for password sign-in
If you sign in to Hourtick with a password, you can now ask for a code from your authenticator app as well. Someone who learns your password still can't get in. Turn it on in Settings in under a minute.
What's new
- Settings → Two-factor authentication: confirm your password, scan the QR code with 1Password, Google Authenticator, Microsoft Authenticator or any authenticator app, and type the first code
- Ten backup codes to copy or download, each good for one sign-in if you lose your phone; make new ones any time
- Signing in asks for the 6-digit code after your password, and a full code submits itself
- Tick “Don't ask again on this device for 30 days” on a computer you trust
- An email tells you whenever two-factor authentication is turned on or off for your account
- Email sign-in links are switched off for accounts with two-factor authentication, so your inbox alone can't get past it
- Google, Microsoft, Apple and single sign-on keep using their own two-factor authentication, so Settings only offers it if you have a password
A password is one thing someone can steal. Two-factor authentication adds a second: a code that changes every 30 seconds on your phone. Open Settings, find Two-factor authentication and choose Turn on. Confirm your password, scan the QR code with your authenticator app (or type the setup key if you can't scan), and enter the code it shows. Hourtick then gives you ten backup codes. Save them in your password manager, or download them as a text file, before you close the window.
From then on, signing in with your password takes you to a second step that asks for the code. Lost your phone? Use one of the backup codes instead; each works once, and you can make a fresh set in Settings with your password. Ten wrong codes in a row pause the second step for 15 minutes. Turning it off also needs your password, and both changes are confirmed by email, so you'll know if someone else tries.
If you sign in with Google, Microsoft, Apple or your company's single sign-on, your provider's own two-factor authentication already protects your Hourtick account, and Settings says so. The iPhone, Android and Mac menu bar apps ask for the code in their next update; until you have it, sign in there with Google, Apple or Microsoft, or turn two-factor authentication on after you've signed in to the apps. Like everything in Hourtick, it's free on every plan.
More in Platform
Track your first hour in a minute.
Free for your whole team, forever. Every feature included.