Skip to main content
Your account controls public causes and, if you fundraise, money. It deserves more than a password. It is all in Configuration › Account Settings.

​
Passkey

A passkey replaces the password with your fingerprint, your face or the device PIN. There is nothing to remember and nothing to steal: the key never leaves your phone or your computer. It is the most secure method and the most convenient one at the same time, which almost never happens.
1

Open passkeys in Configuration

You will see the ones you already have registered.
2

Add one

The device asks you for your fingerprint, your face or the PIN. That’s all.
3

Add the one for your other device

You can have several. It is a good idea: if you lose your phone, you can still get in from the computer.
Register at least two, on two different devices. A single passkey on a single phone is a single point of failure.

​
Two-factor authentication

A code that changes every few seconds in an authentication app. When you turn it on you are shown a QR code to scan with that app. It works on its own and it works as a backup for the passkey.
Keep the recovery codes you are given when you turn it on, somewhere other than your phone. Without them and without the phone, recovering the account depends on support and takes time.

​
Why you are sometimes asked again

There are operations that are not satisfied with the session being open: requesting a cause’s bank account, changing the ways you get paid, touching sensitive data. In those cases you are asked to confirm who you are again. You are asked for whatever you have turned on, no more and no less: If you cancel, the operation simply doesn’t happen. Nothing else follows.
Being asked for nothing means you have no method turned on. That is the sign that you should turn one on.

​
If you see something odd

Check who has access and where it has been signed in from. Devices and sign-ins