Secure your account
Open Account → Security.
Two-step verification
Two-step verification asks for a code from an authenticator app, such as Microsoft Authenticator or Google Authenticator, as well as your password. If it says "Your company has not enabled two-step verification yet", ask your admin.
Turn it on
- Select Set up authenticator app.
- Scan the QR code with your authenticator app.
- Enter the 6-digit Authenticator code and select Turn on.
- Save your recovery codes somewhere safe, then select I have saved these codes. Each code works once, if you lose your phone.
Manage it
| Action | Use it when |
|---|---|
| Get new recovery codes | You've used most of them. Old codes stop working. |
| Forget remembered devices | You signed in on a shared or lost device. You'll be asked for a code next time. |
| Turn off | You no longer want it, if your company allows. Needs a code. |
Lost your phone and your recovery codes? Ask your admin to reset two-step verification for you.
Passkeys
A passkey lets you sign in with your fingerprint, face, screen lock or a security key instead of typing a code. Passkeys can't be phished.
- Select Add a passkey, give it a Name (for example Work laptop) and select Continue.
- Follow your device's prompt.
Each passkey shows when it was added and last used. Remove passkey stops it working.
Browser notifications
Turn on Show notifications in this browser to get approvals and request updates even when HCM Cafe isn't open. They're turned off when you log out. If your browser blocks them, allow notifications for the site in the browser's settings.