Security

Two-factor sign-in (2FA) with an authenticator app, backup codes, a lost phone, the Macs signed in to your account and changing your password.

Everything about who can get into your account is in one place: Settings → Security.

Two-factor authentication (2FA) is optional and off until you turn it on. Once it’s on, every new sign-in, with your email and password or with Google, asks for a 6-digit code from your authenticator app. Any app that makes standard one-time codes works: Google Authenticator, 1Password, Authy, Microsoft Authenticator or the one built into Passwords on iOS and macOS.

Cluinn offers it once, right after you first sign in, on a page you can skip. To turn it on later:

Open Settings → Security and click Turn on….
Scan the QR code with your authenticator app. If you can’t scan it, Enter manually shows a key you can type into the app instead.
Type the 6 digits the app shows and click Turn on.

Your other Macs will ask you to sign in again. That’s expected.

Backup codes

As soon as two-factor is on, Cluinn shows you 10 backup codes. Each one signs you in once if you can’t use your authenticator app. Download saves them as a text file; Copy puts them on the clipboard. Keep them somewhere other than your phone.

Settings → Security shows how many you have left. Make new codes… makes a fresh set of 10 and cancels the old ones.

Signing in with a code

After your password, type the 6 digits from the app. Lost your phone? Choose Use a backup code and type one of your 10; each works once. If you signed in with a backup code, set up your authenticator again from Settings → Security when you have a new phone.

Turning it off

Open Settings → Security, click Turn off…, then enter the 6-digit code to confirm. Sign-ins go back to needing only your password.

Lost your phone and your codes

Email support@cluinn.com from the email address on your account. The contact form can’t be used for this, because we need to see the request arrive from your own address. Once we’ve checked it’s you, we remove two-factor from your account, you sign in with your password and you can set it up again on your new phone. You’ll get an email when it’s removed.

Signed-in Macs

Every Mac signed into your account, with where and when it was last used. The one you’re on is marked Current. Open the ⋮ menu on any other Mac and choose Terminate to sign it out from here; it ends that one session only.

Cluinn also emails you the first time a Mac it has never seen signs in: the Mac’s name, when and roughly where. The email never contains a button or a link to a website. If it wasn’t you, open Cluinn yourself, use Sign out everywhere below, then change your password.

Sign out everywhere

Signs out every Mac and the website, this one included. Use it if a Mac was lost or stolen, or if you get a sign-in email you don’t recognize. Then sign in again on the Macs you keep.

Change password

Enter your new password twice and click Save (at least 8 characters). You’ll be asked for your current password; Forgot your current password? starts a reset instead. If you’ve only ever signed in with Google, this row reads Set a password, and adding one lets you sign in with your email too. Changing your password signs out your other Macs.