# The Auth guide

Set up Dbrij Auth step by step: what you need, what to press, and how you know each step worked.

Canonical page: https://dbrij.com/products/auth/guide

## Set up Auth, step by step

By the end a stolen password isn’t enough to get in, and losing your phone doesn’t lock you out.

Before you start, have these ready

- Your phone, with any authenticator app on it.
- An email address or phone number outside Dbrij, for recovery.

1. ### Keep a strong password

  Reset it from the sign in screen any time. An account without a Dmail address has no password yet: each sign in emails a one time code to its address instead, and claiming a Dmail handle is what moves it to a password.
  [Open Auth](https://dbrij.com/auth)
2. ### Set a recovery email

  Codes go there if you’re locked out. Under **If you are locked out**, add an email address and a phone number outside Dbrij. Changing one sends a code to the new contact first.
3. ### Turn on two step

  Use any authenticator app on your phone. Under **The second step**, turn on two step verification, scan the QR code with your app (or type the setup key), then enter the six digit code it shows. From then on, each sign in asks for a fresh code. Prefer Dbrij Auth? Turn it on in the app's **Settings** instead, and approve each sign in with one tap.
  [Open Auth](https://dbrij.com/auth)
  You will know it worked when two step verification shows On in Auth.
4. ### Add a passkey

  Face, fingerprint or security key. Can’t be phished. Under **The faster way in**, press **Add a passkey** and follow your browser.
5. ### Save recovery codes

  Ten one time codes, kept offline. If your account uses a password, save them somewhere safe and away from your phone. Each code gets you in once.
6. ### Check what is signed in

  Open **Devices** and sign out any device, terminal or app you do not recognise. It signs out only that one.
  [Open Devices](https://dbrij.com/auth/devices)

## Questions people ask

### I lost my phone. How do I get in?

Use one of your recovery codes, or have a code sent to your recovery email or phone from the sign in screen.

### Can I use another authenticator app?

Yes. Any standard authenticator app works: scan the QR code or type the setup key, then enter its six digit code. Dbrij Auth also works, and approves sign ins with one tap.

### How do I sign in on a new device without typing my password?

On the new device, on the sign in screen, choose Link this device from another one instead to get a code, then on your primary device open Devices, press Link a new device and enter the code.

## How each part works

### [What Auth is](#what-auth-is)

Auth is how you sign in everywhere on Dbrij. It asks four questions in order: how you start, the faster way in, the second step, and how you get back in. What’s signed in lists every device, terminal and app holding a way into your account.

### [Good to know](#good-to-know)

- A password alone is never enough once two step is on.
- Changing a recovery contact sends a code to the new one first.
- Revoking a device doesn’t sign anything else out.
- Auth is free and comes with every account.
- Mail apps on your phone and computer each get their own password, made under Apps and devices in Mail.