Two-factor authentication
Add an authenticator app for a faster, more secure second step when you sign in to Basker
Every time you sign in to Basker you're asked for a second step after your password. Out of the box that second step is a six-digit code emailed to you. Setting up an authenticator app swaps the emailed code for one generated on your phone — it arrives instantly, works without a signal, and stops the Review your account security prompt appearing each time you sign in.
Two-factor is already on
You don't switch two-factor authentication on — it's always on for every account. What you choose is how you receive the second-step code. Until you add an authenticator app, Basker emails you a code. This page walks through adding the app.
Before you start
Install an authenticator app on your phone — Google Authenticator, Microsoft Authenticator, Authy, or a password manager such as 1Password all work. Then set your phone's date and time to automatic. A clock that's out of sync is the single most common cause of a setup failing, so it's worth checking first.
Set up an authenticator app
Open your Security settings
Open the account menu — your avatar at the bottom of the left sidebar — and choose Account. Scroll to the Security section. Next to Authenticator app you'll see a status of Off and a Set up button. Click Set up.
Scan the QR code
Basker shows a QR code. In your authenticator app, add a new account and scan it. Can't scan? Use the Manual entry key shown beneath the QR code — copy it into your app's "enter a setup key" option instead.
Enter the six-digit code
Your app now shows a six-digit code for Basker. Type it into Authenticator setup code and click Continue. The code refreshes about every 30 seconds, so read the one showing right now and submit it promptly.
Save your recovery codes
Basker shows ten recovery codes with the note Save these recovery codes. They will not be shown again. Store them somewhere safe — a password manager is ideal. They're your way back in if you ever lose your phone. Once they're saved, click I've saved these codes.
The Authenticator app status now reads On. You're done.
How signing in works now
From now on, after you enter your email and password Basker shows Enter your authenticator code. Open your app, read the current six-digit code for Basker, and enter it. Basker stops emailing you codes, and the Review your account security prompt no longer appears.
If you lose your phone
On the code screen, click Use a recovery code and enter one of the codes you saved during setup. Each recovery code works once.
Keep your recovery codes safe
There's no self-service way to turn the authenticator app off, and recovery codes are shown only once — Basker can't display them again later. If you lose both your phone and your recovery codes, or you're moving to a new phone, contact Basker support to reset your second step.
Troubleshooting
Prefer to use email codes for now?
You don't have to set up an app. If you haven't, Basker emails a six-digit code each time you sign in — the screen reads Enter your one-time code, and the code expires after 15 minutes. If it doesn't arrive, click Resend. You'll keep seeing the Review your account security prompt at sign-in until you add an authenticator app; click Skip for now to dismiss it for that session.