You can protect your Withlocals account using Two Factor Authentication, passkeys, and session management.
Go to Account → Security to manage all security options.
Two Factor Authentication
Two Factor Authentication, or 2FA, adds an extra verification step when signing in. After entering your password, you must also enter a verification code.
2FA is optional.
How to enable 2FA
- Go to Account → Security.
- Select Set up next to Two Factor Authentication.
- Enter your password.
- Scan the QR code with your authenticator app.
- Enter the 6 digit code from your app to activate.
Your account will now require a verification code when signing in.
Backup codes
When you activate 2FA, backup codes are generated.
Save these codes somewhere safe. You can use one if you lose access to your authenticator app.
Backup codes do not expire automatically. You can regenerate them at any time from the Security page.
Signing in with 2FA
After entering your password, you will be asked for a verification code.
You can:
- Enter a code from your authenticator app
- Receive a verification code by email
- Use a backup code
You may select Trust this device for 30 days. If selected, you will not be asked for a verification code again on that device for 30 days.
There is no automatic account lockout after failed attempts, but repeated incorrect entries will prevent successful login.
How to disable 2FA
- Go to Account → Security.
- Select Disable.
- Enter your password to confirm.
Passkeys
Passkeys let you sign in without typing your password. You use your device security such as fingerprint, face recognition, or screen lock.
Passkeys work on supported desktop and mobile browsers.
You can create multiple passkeys for different devices.
How to create a passkey
- Go to Account → Security.
- Select Set up under Passkeys.
- Enter a name for your device.
- Enter your password to confirm.
- Follow the prompts from your device or password manager.
You may also see a prompt to create a passkey after logging in.
How to sign in with a passkey
On the login screen, choose to sign in with a passkey.
Approve the request using your device security method.
How to remove a passkey
- Go to Account → Security.
- Expand the Passkeys section.
- Select Remove next to the passkey.
- Enter your password to confirm.
Removing a passkey does not automatically sign you out from devices that are already logged in.
Active sessions
Selecting Sign out will sign you out from all other devices while keeping the current device active.
This is useful if:
- You signed in on a shared computer
- You lost access to a device
- You suspect someone else accessed your account
Best practices
For stronger protection:
- Use a strong and unique password
- Enable Two Factor Authentication
- Add passkeys to your main devices
Using layered security gives the best protection while keeping login fast and convenient.
If you cannot access your account due to security settings, contact Withlocals Support.