How do I set up 2FA and passkeys?
Add an authenticator app, email codes, or a passkey to protect your account with a second sign-in factor.
Two-factor authentication (2FA) adds a second step to your sign-in so that a password alone is not enough to access your account. BunnyDoc supports three factor types — authenticator apps, email codes, and passkeys — managed from the Security tab.
Your password is required
Every time you add or remove a factor, you must confirm with your current password. It acts as a gate for each change.
To open the page, go to Settings → Security (in the Security & access group). You will see two tabs: Two-factor and Passkey.
Set up an authenticator app (TOTP)
An authenticator app (such as Google Authenticator or Authy) generates a rotating 6-digit code on your phone.
- On the Two-factor tab, click Add authenticator.
- Enter your current password and a label to recognise this factor later.
- Scan the QR code with your authenticator app, or type in the manual secret if you can't scan.
- Enter the 6-digit code from the app to verify.
- If this is your first factor, BunnyDoc shows a set of recovery codes — save them somewhere safe.
Recovery codes
Recovery codes let you sign in if you lose access to your factor. They are shown once, right after you enable your first factor, so store them securely.
Set up email codes
Email codes (a one-time password, or OTP) send a login code to your email address.
- On the Two-factor tab, click Add email codes.
- Enter your current password and a label.
- BunnyDoc emails you a code — enter it to verify.
You can add email codes only once — it is a single factor of that type.
Add a passkey
A passkey (WebAuthn) lets you sign in with your device's biometrics or security key instead of a code.
- Open the Passkey tab and click Add passkey.
- Enter your current password and a label.
- Follow your browser's prompt to create the passkey with your device.
Remove a factor
Each factor can be removed from its tab after re-entering your current password.
Removing an authenticator
To remove a TOTP authenticator you must type delete to confirm — this prevents
accidental removal of your second factor.
This page manages MFA factors only. There is no password-change or session-management option here — your password is used purely as a confirmation gate.
Security & access
Protect your account with two-factor authentication, connect the tools you already use, and control what your team can do.
How do I connect Google Drive, OneDrive, Dropbox, and Slack?
Link cloud storage to auto-upload signed PDFs, and connect Slack to get notifications about your envelopes.