๐ Two-factor sign-in โ
A second key on your phone: without it nobody gets into your account, not even with your password.
What it does for you
- A stolen or guessed password is no longer enough for attackers.
- You notice immediately when someone tries โ they get stuck at the code.
- Unlocks features that need special protection (SSH, help, containers, computer backup).
Who it is for: Everyone โ this is the most important single protection for your account.
What you need: A smartphone with a free authenticator app (see below). Time: about 5 minutes.
Imagine someone finds your house key. With a normal door, they are in. If your door also has a combination lock whose code changes every 30 seconds and is only shown on your phone, they stay outside. That is exactly what two-factor sign-in is (often shortened to โ2FAโ).
How it works โ
During setup, DasDing and an app on your phone exchange a secret key once (via the QR code). From this key and the current time, both independently calculate the same 6-digit code every 30 seconds. When you sign in, DasDing compares your code with its own. The secret key is never transmitted again afterwards โ which is why it can't be intercepted. Your phone doesn't even need the internet for this.
So that you don't have to type all the time, a device counts as trusted for 7 days after entering the code. This approval is bound to the computer itself: on a new or someone else's device you are always asked for the code.
Preparation: app on the phone โ
Install an authenticator app from the App Store or Play Store. Good and free are Aegis (Android) and 2FAS (Android and iPhone); Google Authenticator or Microsoft Authenticator work too.
TIP
For the DasDing code itself please use a separate app, not the ๐ข 2FA codes in the DasDing vault. For all other services you are welcome to use them (Password vault).
Setting up โ
- Top right ๐ โ โ๐ Two-factor sign-inโ โ Set up. A QR code appears.
- In the authenticator app tap โ๏ผโ or โAdd accountโ and scan the QR code with the app (not with the normal camera). In Microsoft Authenticator choose the account type โOther accountโ. If scanning doesn't work: enter the key shown by hand, name โDasDingโ, type โtime-basedโ.
- Enter the 6-digit code from the app โ Confirm.
- Now recovery codes appear. Copy or write them down immediately โ they are only shown this one time.
Recovery codes โ your spare keys โ
Each of these codes works exactly once if your phone is lost or broken. Keep them on paper, for example on the vault emergency sheet of the password vault โ not only in the vault itself, because without the account you can't reach the vault either. When signing in: โPhone not at hand? Use a recovery codeโ.
Warning
without your phone and without recovery codes you can no longer get into your account. Then only support can help, and that takes time.
Managing โ
Under ๐ โ Two-factor you see how many recovery codes are left, and the trusted devices (each can be signed out individually). With a current code you can also turn 2FA off again.
I have a new phone.
If the old phone still works: turn off 2FA in DasDing and set it up again with the new phone. Old phone already gone: sign in with a recovery code, then turn it off and set it up again. Some apps (Aegis, 2FAS) can also move their entries to the new phone.
The code is always rejected.
Almost always the clock on the phone is wrong. Set โautomatic timeโ in the phone settings and try again.
This guide is also available in the program under ๐ Guides โ with jump links to the other guides.