Security

Your password and two-factor authentication are under Settings > Security.

Changing your password

1. Under Change Password, enter your Current Password.
2. Enter a New Password of at least 8 characters, then again under Confirm New Password.
3. Select Change Password. You’ll see “Password changed.”

Changing it signs you out of every other browser, device and app, so it’s also how to sign out of a device you no longer have. You stay signed in where you are.

If you’re an org admin, any organisation API keys you’ve made keep working. Revoke those under Organisation Settings > API.

Two-factor authentication

Two-factor authentication asks for a code from an authenticator app, like 1Password, Google Authenticator or Microsoft Authenticator, as well as your password each time you sign in.

Turning it on

1. Under Two-factor authentication, select Turn on.
2. Enter your current password and select Continue.
3. Scan the QR code with your authenticator app. Can’t scan it? Enter the key shown instead.
4. Enter the six-digit code from the app. It sends itself once the last box is filled.
5. Save your eight recovery codes somewhere safe, like a password manager. Copy under them copies them all.
6. Select Done.

The recovery codes are only shown once, which is why that window only closes with Done.

Signing in with it

After your password, enter the code from your app. Phone not to hand? Select Use a recovery code and enter one of yours instead. Each recovery code works once.

New recovery codes

Running low, or worried someone has seen them? Select New recovery codes and enter your password. The old ones stop working.

Turning it off

Select Turn off, enter your password, then select Turn off again.

If your organisation requires it

Org admins can require two-factor authentication for everyone, with Require two-factor authentication under Organisation Settings > General (see Organisation settings). It applies as soon as they save, not at your next sign in: Folke asks you to turn it on on the next page you open, and nothing else opens until you have. It takes a minute.

After that it stays on. In place of Turn off, you’ll see “Your organisation requires it, so it stays on.”

Lost your phone and your recovery codes?

Your admin can’t turn two-factor off for you, so email us at hey@myfolke.com and we’ll help.