Security
On this page
Here you look after the access to your account. You have the password, two-step verification with your recovery codes, your passkeys, the open sessions on each device and the history of sign-ins of the last 90 days.
If you receive the email «New sign-in to your OnBio account» and do not recognise the sign-in, this is the screen where you close that session and change the password.
How to get there
Open Settings in the side menu and select Security, in the group of personal settings.
What you can do
- Change your password with Change password.
- Move two-step verification to a new phone with Change device.
- Add, rename and remove the passkeys you sign in and confirm with using your fingerprint, your face or the PIN of the device.
- Generate 10 new recovery codes with Generate new codes.
- Close a session you do not recognise or all the others at once.
- Review each sign-in with its result, its device and its approximate location.
Step by step
Add a passkey
- 1. Click Add passkey.
- 2. If your second factor is the authenticator app, type its code and click Continue.
- 3. Confirm with your fingerprint, your face or the PIN when the device asks.
Remove a passkey
- 1. Click Remove on the row of the passkey.
- 2. Confirm with your second factor.
- 3. Click Remove passkey.
Change device
- 1. Select Change device.
- 2. Write your password and the App code you use now.
- 3. Select Continue.
- 4. Scan the code with the app on the new device.
- 5. Write the Code from the new app.
- 6. Select Activate the new device and save the recovery codes that appear.
Close the other sessions
- 1. Review the list of Open sessions. It shows this session and the four with the most recent activity. If you have more, the button under the list shows the others.
- 2. Select Close the other sessions.
Changes to your passkeys
Adding and removing a passkey ask for your second factor, and removing one closes the sessions on your other devices. Without an authenticator app, the last passkey cannot be removed.
- 1. Click Rename to change the name of a passkey.
- 2. Type the name and click Save.
What happens next
Changing the password or removing a passkey closes the sessions on your other devices. Changing device gives you new recovery codes and the previous ones stop working.
Keep in mind
- Two-step verification is mandatory on OnBio and cannot be turned off. A passkey counts as two-step verification.
- You always keep at least one second factor: without an authenticator app, the last passkey cannot be removed.
- A passkey synced with iCloud or Google works on all your devices with that account and shows as Synced.
- Keep the recovery codes off your phone with Download or Copy. If you lose your phone and they run out, you will not be able to sign in.
- If you sign in with Google or Apple and have no password, confirm the device change with a recovery code.
- If you no longer have the old phone, select I no longer have the device and confirm with your password and a recovery code.
Was this helpful?
Need to talk to us?
If you didn't find what you were looking for, write to us. We reply within two working days.