Two-factor authentication
Add an authenticator app for a faster, more secure second step when you sign in to Basker
Every time you sign in to Basker you are asked for a second step after your password. Out of the box that second step is a six-digit code emailed to you. An authenticator app replaces the emailed code with one generated on your phone. It arrives instantly, works without a signal, and stops the Review your account security prompt from appearing each time you sign in.
Two-factor is already on
You do not switch two-factor authentication on. It is always on for every account. What you choose is how you receive the second-step code. Until you add an authenticator app, Basker emails you a code. This page explains how to add the app.
Before you start
Install an authenticator app on your phone. Google Authenticator, Microsoft Authenticator, Authy, and password managers such as 1Password all work. Set your phone's date and time to automatic. An out-of-sync clock is the most common cause of setup failure. Check it first.
Set up an authenticator app
Open your Security settings
Open the account menu (your avatar at the bottom of the left sidebar). Choose Account. Scroll to the Security section. Next to Authenticator app, you will see a status of Off and a Set up button. Click Set up.
Scan the QR code
Basker shows a QR code. In your authenticator app, add a new account. Scan the QR code. If you cannot scan it, use the Manual entry key shown beneath the QR code instead. Copy the key into your app's "enter a setup key" option.
Enter the six-digit code
Your app now shows a six-digit code for Basker. Type it into Authenticator setup code. Click Continue. The code refreshes about every 30 seconds. Read the current code. Submit it right away.
Save your recovery codes
Basker shows ten recovery codes with the note Save these recovery codes. They will not be shown again. Store them somewhere safe. A password manager is ideal. They are your way back in if you lose your phone. Once they are saved, click I've saved these codes.
The Authenticator app status now reads On. You are done.
How signing in works now
From now on, after you enter your email and password, Basker shows Enter your authenticator code. Open your app. Read the current six-digit code for Basker. Enter it. Basker stops emailing you codes, and the Review your account security prompt no longer appears.
If you lose your phone
On the code screen, click Use a recovery code. Enter one of the codes you saved during setup. Each recovery code works once.
Keep your recovery codes safe
There is no self-service way to turn off the authenticator app. Recovery codes are shown only once. Basker cannot display them again later. If you lose both your phone and your recovery codes, or you are moving to a new phone, contact Basker support to reset your second step.
Troubleshooting
Prefer to use email codes for now?
You do not have to add an app. If you have not, Basker emails a six-digit code each time you sign in. The screen reads Enter your one-time code, and the code expires after 15 minutes. If it does not arrive, click Resend. You will keep seeing the Review your account security prompt at sign-in until you add an authenticator app. Click Skip for now to dismiss it for that session.