Set up two-factor authentication and passkeys for admins

A second factor adds confirmation to your edoobox password login. You can configure several methods and choose one when signing in. A Passkey uses your device lock, Touch ID, Face ID or a suitable security key.

This guide applies to admins. A participant account and its Magic Login are described under Participant account and login types.

Open your own profile

Sign in with your own admin access.
Open the profile menu and select Profile.
Go to Settings and the Two-Factor Authentication section.
Select a method and additionally set up a recovery option.

The setup is offered to the signed-in person. Register only your own devices and keys for this access.

Add passkey

Click on Add passkey in the Passkey row.
Enter a clear name, for example “Work laptop” or “Office security key”.
Start the setup. Your browser or device opens the secure registration dialog.
Confirm using the method offered by your device.
Check under Manage devices that the new passkey is listed.

If the browser or device does not support the method, edoobox displays a notice and disables the add button. Then select another offered method. If the device dialog is aborted, repeat the setup and then check the device list.

Sign in with passkey

Enter your email address and password on the admin login page.
Select Passkey on the subsequent two-factor page. If multiple passkeys are stored, their names are displayed together.
Click on authenticate and confirm the sign-in in the device dialog. Do not enter an OTP code for this method.
Wait for completion and then check the selected edoobox account.

In this process, the passkey supplements the password. For SAML-SSO, sign-in is controlled by your Identity Provider; you manage its MFA requirements there.

Set up authenticator app

Select the Add OTP button under OTP authentication.
Scan the displayed QR code with your compatible authenticator app.
Enter the current app code in the confirmation step and complete the setup.
Check the entry via Manage devices.

For later logins, use the current code. If it is rejected, check your device's time and whether you have opened the entry for the correct edoobox access.

Set up phone number

Click on Add number in the Phone row.
Enter a reachable number with country code and select SMS or call.
Request the confirmation.
Enter the received activation code and click on Activate.

The login also consists of requesting and confirming. If a message is missing, check the number, country code, reception, and selected delivery method. Note the SMS or call costs applicable to your account.

Set up YubiKey

Open Add YubiKey.
Generate a YubiKey code in the designated input field and select authenticate.
Generate another code and finish with verify.

The existing YubiKey code method and a security key registered as a passkey are separate entries. Use the method under which you set up the key when logging in.

Secure and renew backup keys

Via Backup keys → reset, you generate ten new replacement keys. Confirm the prompt and store the displayed keys in your secure storage. The complete list is only displayed in this step.

Resetting invalidates previous backup keys. Replace your saved copy of the old list with the new keys. A key that has been used cannot be used to sign in again.

Remove device or resolve loss

Sign in with a remaining method or an unused backup key.
Open the two-factor settings in your own profile.
Select Manage devices for the affected method.
Remove the device that is no longer available. For passkeys, confirm the deletion prompt.
Set up a replacement and then check the login.

Removing an entry in edoobox revokes its use for access to edoobox. Also manage any corresponding entry saved on your device or in your password manager there. If no configured method remains available, contact your account administrator or edoobox support. A password reset does not replace the missing two-factor check.

Everyday examples

New work laptop: Sign in using your existing OTP app, add “Work laptop 2026” as a passkey and check the new entry. Remove the old laptop’s passkey only after the new method works.

Mobile phone lost: You use a secured backup key, remove the affected phone or OTP connection, set up the new method, and renew the backup keys if necessary.