Secure sign-in with an authenticator app or passkey
You can protect your Juuno account two ways from Settings > Profile: turn on an authenticator app, so that sign-in also asks for a code from the app, or add a passkey, so you can sign in with a passkey instead of your password. A passkey uses the fingerprint, face or screen lock of your device. Both settings apply to your whole account, so every sign-in asks for the code no matter which workspace you open.
Passkeys are available when your browser supports them and you are signed in at app.juuno.co. They are not offered on white-label custom domains.
Turn on an authenticator app
An authenticator app is a phone app that constantly generates new six-digit codes. Once you turn it on, signing in with your password or with Google also asks for the current code from that app.
In Settings > Profile, click Turn on authenticator app.
If asked, confirm your email: the dialog says "Before you turn on an authenticator app, confirm that this email is yours." Click Confirm and continue.
Scan the QR code with your authenticator app. If you cannot scan, type the secret key shown under the QR code into the app instead; use the Copy button to copy it.
Enter the six-digit code your app shows in the Authenticator code field, then click Turn on authenticator app.
Save your recovery codes. The Save your recovery codes dialog shows eight one-time codes you can use to sign in without the authenticator app. Click Copy to copy all of them.
Keep your recovery codes in a safe place, because you will not see them again. If you lose both your authenticator app and your recovery codes, you cannot sign in.
Sign in with the authenticator app
After you enter your password or sign in with Google, a Two-step verification step asks for the current code. Enter the 6-digit code from your authenticator app to finish signing in. If you do not have your app, switch to the recovery-code field and enter one of the recovery codes you saved. Each recovery code works one time.
Replace your recovery codes
Get a new set of recovery codes whenever the old ones are lost, used up, or no longer safe to keep.
In Settings > Profile, click Get new recovery codes.
Confirm: your current recovery codes will stop working.
Save the eight new codes from the dialog. They are shown once.
Turn off the authenticator app
Turning off the authenticator app removes the code step from sign-in. You need a current code to do it.
In Settings > Profile, click Turn off authenticator app.
Enter a code from your authenticator app, or one of your recovery codes, in the Authenticator code or recovery code field.
Confirm to turn it off.
Add a passkey
A passkey signs you in without a password, using your device's fingerprint, face or screen lock. You can add a passkey for each device you sign in from, and give each one a name so you can find it later.
In Settings > Profile, click Add a passkey.
If asked, confirm your email, then click Confirm and continue.
Name the passkey in the Name field (for example, Work laptop), then submit. Names can be up to 255 characters.
Your browser then asks you to make the passkey. Approve it with your fingerprint, face or screen lock. If you cancel the prompt, the dialog stays open and you can try again.
When the passkey is created you are signed in with a new session, and your other devices are signed out.
Sign in with a passkey
On the Sign In page, click Sign in with a passkey. Your browser shows the Juuno passkeys stored on that device, and you approve one with your fingerprint, face or screen lock. You do not need to enter your email first. Signing in with a passkey does not ask for an authenticator code; the passkey itself is the second step.
If you cancel the browser prompt, you stay on the Sign In page and can use your email and password instead.
Rename or remove a passkey
Every passkey you have added is listed in Settings > Profile with Rename and Remove actions.
Rename opens the name field prefilled with the current name. Change it and click Save.
Remove asks you to confirm with "Remove this passkey?". Removing it means you can no longer sign in with that passkey, and your other devices are signed out. Removing your only passkey leaves password sign-in (and, if turned on, the authenticator app) as your way in.
Removing a passkey signs you in on the current tab with a fresh session, so you stay signed in while your other devices are signed out.