> ## Documentation Index
> Fetch the complete documentation index at: https://docs.readmeliora.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-step sign-in and passkeys

> Add a passkey, an authenticator app, or email codes, and keep backup codes for when you need them.

A second step at sign-in means someone who learns your password still can't get into your library. It's optional, and it takes about a minute to set up.

Open Settings, then **Security**. The page shows three methods. You can turn on any mix of them.

| Method | What it is |
| - | - |
| **Passkeys** | Face ID, Touch ID, Windows Hello, or a security key. A passkey can also sign you in without your password. |
| **Authenticator app** | A 6-digit code from an app like 1Password, Google Authenticator, or Authy. It works without a phone signal. |
| **Email code** | A code sent to your account email each time you sign in. Good as a fallback. |

The more methods you turn on, the stronger the meter at the top of the page.

## Add a passkey

**1. Open Passkeys**

On the Security page, choose **Add a passkey**, or **Manage** if you already have one.

**2. Name it**

Give the passkey a name, such as MacBook or iPhone, so you can tell your passkeys apart later. The name is optional.

**3. Create it**

Choose **Create passkey** and follow your device's prompt.

Add one passkey for each device you sign in on. Each one is listed with the date you added it, and you can remove any of them.

If ReadMeliora asks you to sign in again before it adds a passkey, choose **Log in again**. You come straight back to Security afterwards.

## Set up an authenticator app

Choose **Set up** under Authenticator app. Scan the QR code with your app, or type in the key shown under it. Enter the code the app shows, then choose **Turn on**.

## Turn on email codes

Choose **Set up** under Email code. ReadMeliora sends a code to your account email. Enter it and choose **Turn on**. If it doesn't arrive, choose **Send a new code**.

## Backup codes

When you turn on your first method, ReadMeliora gives you 10 backup codes. Each one signs you in once if you lose your phone or passkey. Choose **Download** or **Copy** and keep them somewhere safe, like a password manager. You won't see them again.

The Recovery section on the Security page shows how many codes you have left. Choose **New codes** and enter your password to get a fresh set. The old codes stop working.

## Signing in

After you enter your password, ReadMeliora asks you to confirm it's you with one of the methods you turned on. If you have more than one, pick it from the tabs at the top. Choose **Use a backup code** if you can't use any of them.

The second step waits for 10 minutes. After that, enter your password again to start over.

### Sign in with only a passkey

On the log in page, choose **Sign in with a passkey**. Your device asks for your passkey, and you're in without typing a password.

### Trust this browser

At the second step, tick **Trust this browser** to skip it on that browser for 30 days. The Security page shows how many browsers you trust. Choose **Forget** to make all of them ask again. Signing out of a browser also forgets it.

## Remove a method

Choose **Remove** next to the method, or next to a passkey in the passkey list, and enter your password.

> [!NOTE]
>
> We email you whenever a sign-in method is added or removed. If you didn't make the change, change your password straight away.

## When you sign up

New accounts see a **Protect your account** page right after confirming their email. Choose **Set up two-factor** to go to Security, or **Skip for now**. If you skip it, a reminder card shows up in your Inbox about a week later. You can close it with **Not now**.

## When a passkey doesn't work

If your browser can't reach the app where you keep your passkeys, the sign-in stops with a message saying what went wrong. Try another browser, or use your password and another method at the second step.

Some passkey managers don't work with every browser. For example, Firefox on Android may not offer passkeys saved in a separate password manager app. Chrome usually does.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.