Give your sign-in a second lookout

Your email link, then your authenticator

Sign-in confirms your email first, then asks for a time-based authenticator code before opening your workspace in the browser or the updated mobile app. This also applies when creating a workspace.

You can use Google Authenticator, Microsoft Authenticator or another app supporting standard time-based codes. No password is required. Keep sign-in links, setup keys and codes private.

Set up your extra lookout

The QR code and manual key are another form of your authenticator secret. Never share a screenshot containing them. Setup is complete only after a valid code is confirmed. On one phone, copy the setup key, switch to your authenticator to add a time-based account, then return to UptimeOwl. Keep the device clock set automatically.

1. Open your email sign-in or signup link and confirm that the account is yours.
2. On the setup screen, add an account in your authenticator and scan the QR code. If you are using the same device or cannot scan it, choose Can’t scan? Use a setup key in the browser, or On this device? Use a setup key in the mobile app. Add the key manually as a time-based account.
3. Enter the latest six-digit code from that app and select Verify and continue.
4. Save the ten backup codes in a secure place such as your password manager. Download or copy them in your browser; in the mobile app, long-press to copy or choose Save backup codes for your device’s save options. Keep them private, confirm that they are saved, then continue to your nest.

Keep your spare keys ready

Each change needs a fresh code. If you just used your authenticator to sign in, wait for its next code. Your current signed-in browser/device stays connected; other devices need to sign in again. We send a security email without any setup keys or codes.

1. Open Account → Security in your browser and choose Manage authenticator & backup codes. In the mobile app, find Your second lookout in Profile.
2. Check the remaining backup-code count. At two or fewer, your owl will remind you to prepare a fresh set.
3. Choose Get fresh backup codes. Confirm that the previous set will stop working and other sessions will be signed out, then enter a fresh authenticator code or an unused backup code.
4. Save the ten new codes privately and confirm they are safe before returning. The old set no longer works.

Move to a new authenticator

Until the final verification succeeds, the old authenticator stays active. Cancel or start again if setup expires. A backup code used to authorize setup is already spent, even if you cancel.

The mobile app rechecks pending setup after switching back from your authenticator. Restarting the app or leaving a completed code presentation cannot retrieve backup codes again; verify and create another set if needed.

If you have lost both your authenticator and all backup codes, recovery is currently unavailable. Contact [email protected] for assistance; mailbox access alone cannot reset your authenticator.

1. In the same Security area, choose Replace authenticator and confirm the change.
2. Verify with your current authenticator or an unused backup code. Add the NEW setup key to the replacement authenticator, using the QR code or manual key.
3. Enter a code from the new authenticator within five minutes. Only then does it replace the old one. Save the new backup codes before leaving.

When your authenticator is unavailable

After confirming your email link, choose Use a backup code instead and enter one saved code. Each works once and replaces only the authenticator step; you still need your email link. When none remain, your authenticator still works. Use it to create a fresh set before you lose access; old or already-used codes cannot be restored.

Backup codes are shown once after setup. We cannot retrieve them later. Keep your authenticator available if you leave the screen before saving the codes. Contact [email protected] if you need help with access or have lost both your authenticator and backup codes; an email link alone cannot reset an enrolled authenticator.

A code needs another moment

Use the newest code and check that your device clock is set automatically. A code that has already been accepted cannot be used again; wait for the next code if you are signing in again immediately.

Verification expires after ten minutes and repeated guesses are limited. Choose Start sign-in again for a fresh email link if it expires. If you leave the backup-code screen or restart the app, the codes cannot be displayed again.

Web sessions still last 24 hours after successful verification. Closing and reopening an already authenticated tab does not request a code for every page. Mobile sign-in stays in secure device storage until you sign out or access is revoked; it does not expire after 24 hours. Sign out when you finish on a shared device.

If your nest asks you to sign in again

A security update can end an older sign-in that has not completed authenticator verification. Request a fresh email link, then set up or verify your authenticator before returning. This applies to every plan and workspace role, including directors.

On mobile, install the latest UptimeOwl version if the app asks for an update. Your email link is not consumed by the update-required response; reopen it after updating if it is still valid, or request a fresh one. Once verified, normal mobile sign-in stays connected until you sign out or access is revoked.

After signing in again, check Mobile push in Profile if this device needs to reconnect. Other users’ sign-ins and your public widget/status-page links are not changed by your own sign-in.