Skip to main content
Your Layers login is personal to you, so its security settings live in your profile rather than in store settings. From the Security page you can change your password, require an authenticator code at login, and add passkeys that let you log in with your device’s fingerprint, face recognition, or screen lock. These settings apply to your user account across every store and organization you belong to.

​
Open your security settings

  1. Click your avatar in the dashboard header.
  2. Select Profile.
  3. Click Security.

​
Change your password

Use the Change password card on the Security page. Enter your current password, then your new password twice, and save.

​
Confirm your identity before making changes

Two-factor and passkey settings are locked until you confirm it’s you. In the Manage authentication card, confirm with your password or with an existing passkey. The page then shows that your identity is confirmed for security changes, and the Authenticator app and Passkeys cards become editable. When you’re done, click Lock settings. If your confirmation expires while you’re working, Layers asks you to confirm again before it saves the change.

​
Turn on two-factor authentication

Two-factor authentication adds a second step to password logins. After you turn it on, logging in with your password also requires a six-digit code from an authenticator app on your phone or computer.
  1. Confirm your identity in the Manage authentication card.
  2. In the Authenticator app card, click Set up authenticator app.
  3. Scan the QR code with your authenticator app. If you can’t scan it, enter the setup key shown under the code instead.
  4. Enter the six-digit code from your authenticator app and submit it.
Two-factor authentication isn’t active until you submit a valid code. If you leave before then, the card shows Awaiting confirmation and you can click Continue setup to finish, or Cancel setup to start over.

​
Save your recovery codes

When setup finishes, Layers shows a list of recovery codes. Store them somewhere safe, such as a password manager. Each code works once and lets you log in if you lose access to your authenticator app. Never share them. To see your codes again, confirm your identity and click Show recovery codes in the Authenticator app card. If you think your codes have been exposed, click Regenerate codes. Your old codes stop working immediately, so save the new ones.

​
Turn off two-factor authentication

Click Disable authenticator in the Authenticator app card and confirm. Password logins no longer ask for a code. Any passkeys you added keep working.

​
Add a passkey

A passkey lets you log in with your device’s fingerprint, face recognition, or screen lock instead of typing a password. A passkey replaces both your password and your authenticator code, so passkey logins don’t ask for a separate two-factor code.
  1. Confirm your identity in the Manage authentication card.
  2. In the Passkeys card, enter a Passkey name that helps you recognize the device later, such as “Work laptop”.
  3. Click Add passkey and follow your browser or device prompt.
You can add more than one passkey, for example one for your laptop and one for your phone. To remove a passkey, confirm your identity, then remove it from the Passkeys card. That passkey stops working for your account. Your password, authenticator code, and other passkeys are unchanged.

​
Log in

  • With a password: Enter your email and password. If two-factor authentication is on, enter the six-digit code from your authenticator app, then click Verify and log in.
  • With a recovery code: On the code step, click Use a recovery code and enter one of your saved codes. Each code can be used once.
  • With a passkey: Click Log in with a passkey on the login page and follow your device prompt.

​
Troubleshooting

I lost my phone and can’t get an authenticator code. Use one of your recovery codes on the code step. After you log in, set up the authenticator app again on your new device and regenerate your recovery codes. My passkey doesn’t work. Try again, or log in with your password instead. If the passkey was created on a device you no longer use, remove it and add a new one. My changes didn’t save and I was asked to confirm again. Your identity confirmation expired. Confirm with your password or a passkey again, then retry the change.

​
Next steps