Updated 2026-09-25
Your email sign-in code proves you control your inbox. Adding a second step means someone with access to your email still can't sign in as you.
Authenticator app (TOTP)
In your security settings, scan the QR code with an authenticator app, then enter a code to confirm. From then on, signing in asks for a code from the app.
Passkeys
A passkey uses your device's fingerprint, face or PIN, or a security key. You can use a passkey to sign in, and also to unlock Atrium without typing your master password. Your master password keeps working alongside it.
If you lose your second step
Remove old devices and passkeys from your security settings when you replace them. If you recover your account with your Recovery Kit, passkey unlock is removed and you'll need to add it again.