docket.rocks
DE Create your workspace

Two-factor authentication

Protect your login with a code from an authenticator app — and how Admins make it mandatory for the whole workspace.

With two-factor authentication (2FA), signing in takes your password and a 6-digit code from an authenticator app on your phone — 1Password, Google Authenticator, Authy or any other app that shows "TOTP" codes. Someone who learns your password still can't get in.

Turn it on

  1. Open your Settings (your name in the sidebar → Settings) and find Two-factor authentication.
  2. Click Set up and scan the QR code with your authenticator app. Can't scan? Type the key shown below it into the app instead.
  3. Enter the 6-digit code the app shows and click Turn on.
  4. docket shows you ten backup codes. Save them now — in a password manager, or printed. They're shown only this once.

Signing in

After your email and password, docket asks for the code your app currently shows. Codes change every 30 seconds, and each one works only once.

Lost your phone?

  • Use a backup code instead of the app's code. Each backup code works once; your 2FA page shows how many you have left, and you can create a new set any time (this voids the old ones).
  • No backup codes either? Ask an Admin of your workspace: under Admin → Users → your name → Settings they can reset your two-factor authentication. You then sign in with your password and set it up again.

To move to a new phone, open Two-factor authentication → Manage, turn it off (this needs your password and a current code) and set it up again with the new phone.

For Admins: make it mandatory

Under Admin → Settings, tick Require two-factor authentication and save. From then on, everyone who hasn't set it up yet is taken to the setup the next time they open docket — they can't use it until 2FA is on. Members who already use it notice nothing.

Admins can reset other members' two-factor authentication, but not their own: that always takes your password and a current code.