Two-factor authentication

Two-factor authentication adds a second step when you sign in to SubImage with your email and password. After you enter your password, SubImage asks for a code from your authenticator app. You can also sign in with a passkey, which counts as both steps.

You manage two-factor authentication on the Account page of your profile. Your organization can also require it for everyone who doesn't sign in with SSO.

Before you begin

• If you sign in with your company's single sign-on (SSO), you don't need to set up two-factor authentication in SubImage. Your identity provider handles it, and the Account page tells you so. For more information, see Single sign-on.
• To set up an authenticator app, install one on your phone or computer, such as 1Password, Google Authenticator, or Microsoft Authenticator.
• Every change to your two-factor settings starts with a one-time code that SubImage emails to you. Make sure you can open that email.

Set up an authenticator app

1. Go to Profile → Account.
2. In the Two-factor authentication section, next to Authenticator app, click Set up.
3. In the Confirm it's you dialog, click Send code.
4. Enter the code from the email, and then click Verify.
5. Scan the QR code with your authenticator app. If you can't scan it, copy the key below the QR code into your app instead.
6. Enter the 6-digit code that your app shows, and then click Turn on.

The Authenticator app row shows on. The next time you sign in with your password, SubImage asks for a code from your app.

Remove an authenticator app

1. Go to Profile → Account.
2. Next to Authenticator app, click Remove.
3. Click Remove to confirm.
4. If SubImage asks you to confirm it's you, click Send code, enter the code from the email, and then click Verify.

If your organization requires two-factor authentication, SubImage asks you to set up an authenticator app again the next time you sign in.

Passkeys

A passkey lets you sign in with your device's fingerprint or face recognition, or with a security key, instead of a password. A passkey counts as both steps, so SubImage doesn't ask for an authenticator code when you sign in with one.

Add a passkey

You add a passkey on the SubImage sign-in page, not on the Account page. You can add one in either of these ways:

• When you create your SubImage account, choose to sign up with a passkey.
• When you sign in with your password, SubImage offers to create a passkey. Follow the prompts to add one.

If you skip the offer, SubImage reminds you every two weeks. You can also choose not to be asked again.

If you sign in with SSO, SubImage doesn't offer a passkey. Your identity provider controls how you sign in.

You can have one passkey. After you add it, you sign in with the passkey, so SubImage doesn't offer another. If you save the passkey in a password manager that syncs, such as iCloud Keychain, Google Password Manager, or 1Password, you can use it on every device where you use that password manager.

Remove a passkey

1. Go to Profile → Account.
2. Under Passkeys, find the passkey by the date that you added it, and then click Remove.
3. Click Remove to confirm.
4. If SubImage asks you to confirm it's you, click Send code, enter the code from the email, and then click Verify.

After you remove a passkey, you can't use it to sign in. Remove a passkey when you lose or replace the device that it's on.

Move your passkey to a new device

To use a passkey on a device that your current passkey doesn't sync to, replace it:

1. On the new device, sign in with your email and password. If you don't have a password, click Forgot password on the sign-in page to set one, and then sign in with it. Setting a password signs you out of SubImage everywhere.
2. Remove your current passkey.
3. Sign out, and then sign in again with your email and password.
4. When SubImage offers to create a passkey, follow the prompts.

If you chose not to be asked again, SubImage doesn't offer a passkey when you sign in.

Require two-factor authentication for your organization

To require two-factor authentication for everyone in your organization who doesn't sign in with SSO, ask the SubImage team. When it's required, people who haven't set up an authenticator app are asked to set one up the next time they sign in.

Troubleshooting

The code from my authenticator app doesn't work

Authenticator codes depend on your device's clock. Make sure that your device sets its time automatically, and then enter the next code that your app shows.

I lost the device with my authenticator app

If you can still sign in with a passkey, go to your Account page, remove the authenticator app, and then set it up again on your new device. Otherwise, ask the SubImage team to reset your two-factor authentication.

I didn't get the email with my code

Check your spam folder. The email comes from SubImage with the subject "Verify your email address". To get a new code, click Resend code in the Confirm it's you dialog.