First access

Enrol with the desk.

Your named lead gave you a 16-character enrolment code, by telephone, in person or by letter. It is never sent by email. It works once and expires after seven days.

Email address the desk has for you

Enrolment code

Choose a passwordAt least 12 characters. A passphrase of four or five words is ideal.

Repeat the password

Enter the six-digit code from your authenticator app.

Authenticator code

Lost the device with your authenticator? Enter one of the recovery codes you printed when you enrolled. It works once, and you will then add a new authenticator.

Recovery code

No recovery codes either? Telephone your named lead: the desk can issue a fresh enrolment code after confirming who you are.

Add an authenticator. Open an authenticator app (1Password, Google Authenticator, Microsoft Authenticator, Authy or a hardware key app) and scan this code. The app works offline; the desk never sees its codes.

Authenticator enrolment code

Or enter this key by hand

Six-digit code from the app

Your recovery codes. Print them or store them offline, away from your phone. Each opens your account once if your authenticator is lost. They are shown only now.

I have stored these codes somewhere safe and offline.

Sign in with a glance next time. Add a passkey on this device and future sign-ins take one biometric check: Face ID, Touch ID, Windows Hello or your phone's fingerprint. No password or code to type, nothing to phish, and the key never leaves your device.

Three steps: your code and a password, then an authenticator app, then printed recovery codes. Already enrolled? Sign in.