# Two-factor authentication

Protect your S+M account with a passkey or an authenticator app, and require it for everyone in your company.

Two-factor authentication asks for a second proof that it's you, besides your password. It keeps your account safe
even if someone learns your password.

## What counts as two factors

- Your password plus an **authenticator app** code (such as Google Authenticator or Microsoft Authenticator).
- Your password plus a **security key**.
- A **passkey** on its own: it already combines your device with your fingerprint, face or PIN.

> [!NOTE]
> Signing in with Google alone counts as one factor. Add a passkey or an authenticator app to your S+M account too.

## Set it up

:::steps
1. Sign in at [my.sapiensandmachines.com](https://my.sapiensandmachines.com) and open **Security**.
2. Choose **Manage passkeys, authenticator apps and your password**.
3. Add a passkey, or scan the code with your authenticator app.
4. Sign out and sign in again using your new second factor.
:::

## Who needs it

- **Owners** of a company always sign in with two factors.
- An owner can require it for **everyone in the company**: in **Security**, tick **Require two-factor sign-in for
  everyone in** (your company) and choose **Save**. Members and billing contacts then need it too.

> [!IMPORTANT]
> Someone who signed in without two factors is asked to set it up and sign in again before they can continue.