Setting up two-factor authentication

What two-factor authentication does

When two-factor authentication is on, logging in requires a 6-digit verification code sent to your registered email address, in addition to your password.

We recommend turning on two-factor authentication to protect your projects, published sites, and payment information.

Once it's on, you'll be asked for a verification code whenever you log in with your email address and password to:

Note: You can only set up two-factor authentication on an account that has a password. If you signed up with Google or Facebook only, [Two-factor authentication] doesn't appear in your account settings.

To protect those accounts, consider using the security settings of Google or Facebook.

Turning on two-factor authentication

Click your account icon in the top-right corner of the editor or the project dashboard, and select [Settings].
On the [Account] tab, click [Two-factor authentication]. The current status ([Off]) is shown on the right.
Enter your [Current Password] and click [Send verification code]. A verification code is sent to your registered email address.
Enter the 6-digit [Verification code] from the email and click [Turn on]. When "Two-factor authentication is now on" appears, you're done. A notification about this change is sent to your registered email address.

Entering the verification code when you log in

On the login page, enter your email address and password and log in. The verification code screen appears.
Open your inbox and copy the 6-digit verification code from the email.
Go back to the Studio.Design login screen, enter the verification code, and click [Sign in].

If the email doesn't arrive, click [Resend code]. Right after a code is sent, you can resend it once the countdown on the button finishes. Resending makes any code you received earlier unusable.
A verification code is valid for 10 minutes from the time the first code was sent. If it expires, or if you enter an incorrect code too many times, log in again from the start.

Turning off two-factor authentication

Click your account icon in the top-right corner of the editor or the project dashboard, and select [Settings].
On the [Account] tab, click [Two-factor authentication]. [On] is shown on the right.
Enter your [Current Password] and click [Send verification code].
Enter the 6-digit [Verification code] sent to your registered email address and click [Turn off]. When "Two-factor authentication is now off" appears, you're done. A notification about this change is sent to your registered email address.

Frequently asked questions

[Two-factor authentication] doesn't appear in my account settings.

[Two-factor authentication] only appears on accounts that have a password and have completed email verification. It doesn't appear on accounts created with Google or Facebook only.

Can I use Studio.Design's two-factor authentication if I log in with Google or Facebook?

Studio.Design's two-factor authentication applies when you log in with an email address and password.

If you log in with Google or Facebook, consider protecting your account with the security settings of Google or Facebook instead.

The verification code email doesn't arrive.

Try the following:

Wait a few minutes, then reload your inbox.
Check your spam folder. If the message was filtered as spam, mark mail from studio [ noreply@studio.site ] as "not spam". For Gmail, see Create rules to filter your emails - Gmail Help.
On the verification code screen, click [Resend code] to send a new code. There's a limit on how many times you can resend. If you reach it, wait a while and log in again.

Tips: If you use a Google Groups mailing list
Depending on the group's security level, mail from Studio.Design may be treated as spam and never delivered. If you use Google Groups, adjust the group's spam settings by following Legitimate email marked as spam - Google Workspace Admin Help, then try sending the email again.

Do I have to enter a verification code every time I log in?

Yes.

While two-factor authentication is on, you need a verification code every time you log in with your email address and password. It isn't skipped on devices you've used before.

Can I receive the verification code through an authenticator app or SMS?

No. Verification codes are only sent by email to your registered email address.

Can I make two-factor authentication mandatory for everyone in my workspace?

No.

Each account holder sets up two-factor authentication for themselves. Workspace and project owners can't change another member's setting or make it mandatory. Ask the account holder to set it up.

I received an email titled "External account connected". What is it?

When you log in with a Google account that uses the same email address as your Studio.Design account, the two accounts are linked, and we send an email titled "External account connected" to your registered email address. It shows the service name and the date and time of the link.

If you don't recognize this change, change your Studio.Design password, then contact Studio.Design support with the date and time above and the service name.