Two-factor authentication and passkeys

Add a code from your phone to your account's sign-in, keep backup codes, and sign in with a passkey from app.filarr.com.

On this page
Documentation sections

Two-factor authentication (2FA) adds a second check when you sign in to your Filarr account: after your password, you type a 6-digit code that an app on your phone creates. A passkey lets you sign in to your account with your fingerprint, your face or your device's code, without typing a password.

Both protect access to your account. Neither replaces the password that decrypts your files.

Turn on two-factor authentication

You need an authenticator app on your phone, such as Authy, Google Authenticator or 1Password.

  1. Open Settings → Security.
  2. Next to Two-factor authentication (2FA), click Enable.
  3. In the Enable two-factor authentication window, scan the QR code with your authenticator app. If you cannot scan it, type the code shown under Manual entry (secret key) into the app.
  4. Click Next.
  5. Type the 6-digit code that your app shows, then click Verify.

Two-factor authentication is on as soon as the code is accepted. Filarr then shows your 8 backup codes.

  1. Save them: Copy puts them on the clipboard, Print works in the desktop app. Write them down or store them in a password manager.
  2. Tick I saved my backup codes in a safe place, then click Done.

The Two-factor authentication (2FA) row now reads "Enabled. 8 backup codes remaining."

Sign in with two-factor authentication

After your email and password, Filarr opens the Two-factor authentication window.

  1. Type the code from your app: "Enter the 6-digit code from your authenticator app."
  2. Tick Remember this device for 30 days if this device is yours. Filarr will not ask for the code here again during that time.
  3. Click Validate.

Filarr forgets the remembered devices when you change your password or recover your account with your 24-word phrase.

Backup codes

Backup codes help when your phone is not with you. Each code works once, in place of the 6-digit code.

  1. In the Two-factor authentication window, click Use a backup code.
  2. Type one of your codes, then click Validate. Codes are two groups of four letters and digits, separated by a dash. Once used, a code no longer works.

To go back to the app's code, click Use authenticator app.

Backup codes only replace the app's code at sign-in. They are not recovery phrases, and they unlock no data.

To get a fresh set, for example when few codes are left:

  1. Open Settings → Security.
  2. Next to Two-factor authentication (2FA), click Regenerate backup codes.
  3. Enter your Account password and the Current TOTP code from your app, then click Validate.
  4. Save the new codes. The old ones stop working.

Turn off two-factor authentication

  1. Open Settings → Security.
  2. Next to Two-factor authentication (2FA), click Disable.
  3. In the Disable 2FA window, enter your Account password and a code in TOTP or backup code.
  4. Click Disable.

You can turn it back on later with the same steps as the first time.

If your organization requires two-factor authentication, Filarr asks you to set it up when you sign in ("Your organization requires two-factor authentication"). Follow the same steps, then click Finish and sign in.

Passkeys

A passkey signs you in to your account with what your device already knows: your fingerprint, your face or its code. It proves two things at once, that you hold the device and that you can unlock it. So Filarr does not ask for your 2FA code when you sign in with a passkey.

A passkey opens the account, not your files. Filarr still asks for your vault password on a device that does not have your key yet: "You are signed in. This device does not have your vault key yet: enter your password once to decrypt it."

Why passkeys live in the web app

Create a passkey

  1. Go to https://app.filarr.com and sign in.
  2. Open Settings → Security. The Passkeys section is at the top.
  3. Type a name in the field that reads "This computer, my phone…", for example the name of the device that holds the passkey.
  4. Click Add a passkey.
  5. Follow your browser's or your system's prompt.

Filarr shows Passkey added, and the passkey appears in the list with its name. The word synced appears next to it when your system or your password manager keeps a copy of it on your other devices. You can register up to 20 passkeys.

Sign in with a passkey

  1. On the sign-in screen of the web app, click Sign in with a passkey.
  2. Confirm on your device with your fingerprint, your face or your code.

Remove a passkey

In the list of the Passkeys section, in the web app, click Remove next to the passkey.