Two-Step Verification

Two-step verification adds a six-digit code after your email address and password. It is available to accounts that have a Spleen password.

Set it up

Open Account → Password & 2FA and choose Set up two-step verification. Confirm your password, then scan the QR code with an authenticator app. You can enter or copy the setup key manually if scanning is not practical. Enter the six-digit code from the app to verify and enable protection.

Spleen then shows a set of one-time backup codes. Copy or download them and keep them somewhere safe outside Spleen. Backup codes are shown only when they are created, either during setup or after you generate replacements, and each code can be used once.

Sign in with a code

After entering your email address and password, enter the current code from the authenticator app. Choose Use a backup code when the app is unavailable.

Select Trust this device for 30 days only on a browser you control. Spleen can then skip the extra code in that browser during the trust period.

Replace backup codes or turn protection off

Return to Account → Password & 2FA. Generate new backup codes asks for your password and immediately makes the old codes unusable. Save the replacement codes before closing the dialog.

Choose Disable and confirm your password to turn two-step verification off.

If you lose both the authenticator and all backup codes, you will be locked out. Spleen cannot restore access, so keep at least one backup code somewhere you can reach without signing in.