Manage your security methods
The Security page
All your verification methods are managed in one place. To get there, click your profile icon (top right of the portal) and select Security.
You'll see a unified table listing every method currently enrolled on your account:
| Column | What it shows |
|---|---|
| Type | Authenticator app (TOTP) or Passkey |
| Name | The friendly name you gave it during setup. For passkeys, the authenticator vendor name is shown alongside when the device is recognised (e.g. Apple Touch ID — My MacBook). |
| Added on | Date you enrolled this method |
| Last used | Date you last used it to sign in |
| Actions | Remove button |
Adding a new method
Click the button that matches what you want to add:
- Add authenticator app — follow the authenticator app guide.
- Add Passkey — follow the Passkey guide.
You can add as many methods as you like. Having more methods means more options if one becomes unavailable.
We recommend keeping at least two methods active — for example, a Passkey on your laptop and an authenticator app on your phone. That way you're never locked out if one device is unavailable.
Removing a method
Find the method you want to remove in the table and click Remove. A confirmation dialog will appear. Read it carefully — it will warn you if you're about to remove your only method.
If you remove the method you use most, make sure you have another one set up before confirming. Once removed, the method is gone immediately.
What if I try to remove my last method?
The portal will warn you before you can remove your last enrolled method. We recommend keeping at least one method active at all times. If you remove your only enrolled method and get locked out, contact your workspace admin — they can reset your access and send a fresh invitation.
After regaining access, go straight to Security and enrol a new authenticator app or Passkey.
Keeping your account secure
A few habits that help:
- Review your methods periodically. If you see a Passkey or authenticator entry for a device you no longer use, remove it.
- Add a method before removing one. If you're changing phones, add the new device's Passkey or authenticator before deleting the old one.
- Store your recovery codes safely. These were shown once when you enrolled your authenticator app. If you've lost them, enrol a new authenticator app to generate a fresh set.