Set up two-step sign-in

Add a 6-digit code from an authenticator app on your phone, so a stolen password isn't enough to get into your account.

Before you begin

  • Your phone, with an authenticator app installed. Any app that makes 6-digit codes from a QR code works.

With two-step sign-in, you sign in with your password and a 6-digit code from an authenticator app on your phone. The code changes every 30 seconds, and only your phone can make it. Someone who learns your password still can't get in.

#Turn it on

  1. Open My account from your photo or initials in the top right, then the Security tab.
  2. Under Two-step sign-in is off, select Set up.
  3. On your phone, open your authenticator app and add a new account (often a + button).
  4. Scan the QR code on your screen with the app. If you can't scan it, choose to enter a key in the app and type the Key shown under the QR code.
  5. The app shows a 6-digit code for your Bramble account. Type it into the box and select Turn on two-step sign-in.

You'll see Two-step sign-in is on. Next time you sign in, you'll be asked for a code after your password.

Tip

Once two-step sign-in is on, mail, calendar and contacts apps on your phone or computer need an app password instead of your normal password. Set those up now so your mail keeps working.

#Signing in with two-step sign-in

  1. Enter your email and password as usual.
  2. When asked for a Two-factor code, open your authenticator app and type the current 6-digit code for Bramble.
  3. Select Verify.

#Turn it off

  1. Open My account → Security.
  2. Select Turn off and confirm.

If you see Your organisation requires this, there's no Turn off button: your admin has a security policy that requires two-step sign-in.

#If you get a new phone

Before you wipe or hand in your old phone, sign in to Bramble and turn two-step sign-in off, then set it up again on your new phone. If your organisation requires it, or you no longer have the old phone, ask your admin to reset your two-step sign-in.

Warning

Never tell anyone a code from your authenticator app, even if they say they're from IT or from Bramble. Nobody needs your code except the Bramble sign-in page.