Multi-Factor Authentication

Set up and manage multi-factor authentication for enhanced account security.

Last updated: September 2026

Why Use Multi-Factor Authentication

Multi-factor authentication (MFA) adds a second layer of security beyond your password. Even if someone obtains your password, they cannot access your account without your second factor.

Available Authentication Methods

EasyBook offers two second factors — an authenticator app and passkeys — plus fallbacks for when you can't use them.

Authenticator App (TOTP)

Use an authenticator app such as Google Authenticator, Authy, or any TOTP-compatible app to generate time-based codes.

  1. Go to Settings › Account › Password & Security › Two-Factor Authentication.
  2. Choose Authenticator App and click Get Started.
  3. Scan the QR code with your authenticator app.
  4. Enter the 6-digit code displayed in the app to verify.
  5. Save your recovery codes in a secure location.

Passkeys (WebAuthn)

Passkeys provide modern passwordless authentication using your fingerprint, face recognition, or a hardware security key.

  1. Go to Settings › Account › Password & Security › Two-Factor Authentication.
  2. Under Passkeys, click Add Passkey.
  3. Give the passkey a name, then follow the browser prompt to register your fingerprint, face or security key.
  4. Save the recovery codes EasyBook generates for you.

Registering a passkey also generates recovery codes for your account. You can sign in with a passkey directly from the login screen, or use it as your second factor.

Fallback Methods at Sign-In

If you can't use your authenticator or passkey, choose Need another way to verify and pick:

  • Recovery Code — one of your backup codes.
  • Trusted Device — approve the sign-in from a device you've used before.
  • Recovery Email — a 6-digit code sent to your recovery email.

Recovery Codes

When you enable two-factor authentication you receive a set of one-time backup codes. They let you get back in if you lose your device.

  • Each recovery code can only be used once.
  • Store your codes in a password manager or other secure location.
  • You can generate a new set of codes at any time, which invalidates the previous set.

Step-Up Verification

For sensitive actions EasyBook asks you to verify your identity again, even when you are signed in:

  • Your account: Changing your password or email, adding or removing an authenticator, passkey or recovery email, regenerating recovery codes, deactivating or deleting the account.
  • Your team: Removing a member or changing their role.
  • Your business: Closing a venue or closing the business.

When prompted, verify with your authenticator, passkey or a code sent to your email to continue.

Managing Your MFA Settings

You can update your configuration at any time.

  1. Go to Settings › Account › Password & Security › Two-Factor Authentication.
  2. Add or remove the authenticator app and passkeys, and generate new recovery codes.
  3. Removing a method asks you to verify your identity first.

MFA for Your Team

As an Owner or Admin, encourage every member to turn on two-factor authentication.

  • Recommend it to new members when they join.
  • Ask them to add a recovery email first so they can always get back in.
  • It protects the whole organization's data, not just their account.

Recovery Email

Add a recovery email as a safety net. It must differ from your primary email, and it works as a sign-in fallback: EasyBook can send a 6-digit code there when your other methods are unavailable. The app suggests setting it up before you enable two-factor authentication.

  1. Go to Settings › Account › Password & Security.
  2. Open Recovery Email.
  3. Enter a different email address that you control.
  4. Click the verification link sent to the recovery email to confirm it.