Skip to main content
A second step at sign-in means someone who learns your password still can’t get into your library. It’s optional, and it takes about a minute to set up. Open Settings, then Security. The page shows three methods. You can turn on any mix of them. The more methods you turn on, the stronger the meter at the top of the page.

​
Add a passkey

1

Open Passkeys

On the Security page, choose Add a passkey, or Manage if you already have one.
2

Name it

Give the passkey a name, such as MacBook or iPhone, so you can tell your passkeys apart later. The name is optional.
3

Create it

Choose Create passkey and follow your device’s prompt.
Add one passkey for each device you sign in on. Each one is listed with the date you added it, and you can remove any of them. If ReadMeliora asks you to sign in again before it adds a passkey, choose Log in again. You come straight back to Security afterwards.

​
Set up an authenticator app

Choose Set up under Authenticator app. Scan the QR code with your app, or type in the key shown under it. Enter the code the app shows, then choose Turn on.

​
Turn on email codes

Choose Set up under Email code. ReadMeliora sends a code to your account email. Enter it and choose Turn on. If it doesn’t arrive, choose Send a new code.

​
Backup codes

When you turn on your first method, ReadMeliora gives you 10 backup codes. Each one signs you in once if you lose your phone or passkey. Choose Download or Copy and keep them somewhere safe, like a password manager. You won’t see them again. The Recovery section on the Security page shows how many codes you have left. Choose New codes and enter your password to get a fresh set. The old codes stop working.

​
Signing in

After you enter your password, ReadMeliora asks you to confirm it’s you with one of the methods you turned on. If you have more than one, pick it from the tabs at the top. Choose Use a backup code if you can’t use any of them. The second step waits for 10 minutes. After that, enter your password again to start over.

​
Sign in with only a passkey

On the log in page, choose Sign in with a passkey. Your device asks for your passkey, and you’re in without typing a password.

​
Trust this browser

At the second step, tick Trust this browser to skip it on that browser for 30 days. The Security page shows how many browsers you trust. Choose Forget to make all of them ask again. Signing out of a browser also forgets it.

​
Remove a method

Choose Remove next to the method, or next to a passkey in the passkey list, and enter your password.
We email you whenever a sign-in method is added or removed. If you didn’t make the change, change your password straight away.

​
When you sign up

New accounts see a Protect your account page right after confirming their email. Choose Set up two-factor to go to Security, or Skip for now. If you skip it, a reminder card shows up in your Inbox about a week later. You can close it with Not now.

​
When a passkey doesn’t work

If your browser can’t reach the app where you keep your passkeys, the sign-in stops with a message saying what went wrong. Try another browser, or use your password and another method at the second step. Some passkey managers don’t work with every browser. For example, Firefox on Android may not offer passkeys saved in a separate password manager app. Chrome usually does.