# Passkeys and two-step verification

> Protect your HealthRide sign-in from Settings under Security, where you can set up a passkey (the easiest option) or six-digit codes from an authenticator app.

Source: https://healthride.app/knowledge-base/account/passkeys-and-two-step-verification/

Your account holds passenger and trip information, so a password alone is not enough. Open **Settings** and choose **Security** to add a second layer. The **Account security** card at the top shows **Protected** once you have set something up, or **Not set up** if you have not.

You have two options. We recommend a passkey — it is the easiest by far.

## Set up a passkey (recommended)

A passkey lets you sign in with your device unlock — fingerprint, face recognition, or your computer's PIN. There are no codes to type, and passkeys cannot be phished.

<Steps>
<Step>
Open **Settings**, choose **Security**, and find the **Passkeys** card.
</Step>
<Step>
Click **Set up passkey**. Your browser will ask you to confirm with your fingerprint, face, or PIN — the same way you unlock your device.
</Step>
<Step>
Your new passkey appears under **Registered passkeys**. Next time you sign in, click **Sign in with passkey** on the login page instead of typing your password.
</Step>
</Steps>

You can add a passkey on each computer you use — click **Add another passkey** on that device. To remove one, click **Delete** next to it in the **Registered passkeys** list.

## Set up authenticator app codes

If you prefer, you can use six-digit codes from an app like 1Password, Google Authenticator, or Microsoft Authenticator.

<Steps>
<Step>
On the **Security** page, find the **Authenticator app** card. Enter your **Current password** and click **Start authenticator setup**.
</Step>
<Step>
Copy the **Setup key** into your authenticator app. The app starts generating six-digit codes.
</Step>
<Step>
Type the current code under **Verification code** and click **Verify code**.
</Step>
<Step>
HealthRide shows a set of **Backup codes**. Click **Copy** and store them somewhere safe — printed and filed works well.
</Step>
</Steps>

From then on, after you enter your password, a **Verify sign-in** screen asks for the current code from your app. If your phone is lost, switch to the **Backup code** tab on that screen and enter one of your saved codes.

<Callout type="warn" title="Save your backup codes">
Backup codes are shown once, during setup. Without them, losing your phone can lock you out of your account.
</Callout>

What next? See Roles and permissions to control what each team member can do.