Two-step verification in My WebOké and setting up an authenticator app
We always secure My WebOké with two-step verification (2FA). After your password, My WebOké asks for a second step: by default a six-digit code that we send to your email address. This is on for everyone and cannot be turned off. If you want it even more secure, set up an authenticator app. It generates a new code on your phone every 30 seconds, even without an internet connection.
Setting up an authenticator app
- Install an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator, or the authenticator in your password manager.
- Log in to My WebOké and go to Login Details in the menu (under My Administration).
- On the Two-Factor Authentication card, click Set up.
- Scan the QR code with the app. If scanning doesn't work, type in the Manual key instead and choose a time-based code.
- Type the six-digit code from the app into the Code from your app field and click Activate.
From then on, we'll ask for the code from your app when logging in, and you'll no longer receive codes by email. Use Turn off authenticator app on the same card to switch back to the email code.
Lost phone or a new phone
- New phone: turn off the app first and then turn it on again on the new phone, or transfer your accounts using the feature your app has for that. Do this before wiping your old phone.
- Lost the app and can't log in anymore? My WebOké doesn't have recovery codes. Contact us without logging in, via Contact without an account (guest ticket). We'll first check that you're really the owner.
Explanation with screenshots: The login code by email (two-step verification), Using an authenticator app and Viewing active sessions and logging out in the WebOké manual. Two-step verification for DirectAdmin and Nextcloud is set up separately, see Setting up Two-Factor Authentication and Setting up two-step verification (2FA) in Nextcloud.