What it does
Add a passkey in Settings → Account, up to ten, one on each device. A passkey checks you as well as the device, so it counts as two-factor. You get an email whenever one is added or removed.
Continue with Google on the sign-in page, on every plan.
A six-digit code from an authenticator app on every new sign-in, with recovery codes that each work once. Authenticator secrets are stored encrypted.
- 5 wrong codes lock the code step for 5 minutes, then 10, then 20, up to a day
- Counted for the whole account, not one browser
- A security notice in the app on the first lock
See each session and sign out everywhere. A New sign-in alert, in the app and by email, comes only from a browser your account hasn't used before; signing a browser out forgets it.
Verify your email domain and require everyone at it to sign in with Google. Someone removed from your Workspace can no longer get in.
Which plan includes it
- Passkeys and Google sign-in
- Two-factor with an authenticator app
- New sign-in alerts and your sessions
- Sign-in with your company’s Google Workspace
How to start
- 1Open Settings → Account
- 2Add a passkey on this device
- 3Turn on two-factor and keep the recovery codes
- 4Check your sessions now and then
Templates to start from
Every templateGoes well with
In the help centre
Questions
Does my password still work with a passkey?
Yes. A passkey is another way in.
What if I lose a device?
Sign in another way, then remove that device's passkey in Settings → Account. If it held your authenticator app, use one of your recovery codes.
Try it on your next form.
Free to start, with unlimited forms, responses and members. See what each plan includes on the pricing page.