Security

For: All roles

Lumieos uses passwordless authentication — there is no password to set or change. Instead, you sign in by clicking a magic link sent to your email address. The Security tab in Account Settings gives you tools to add additional verification methods: two-factor authentication (2FA) and passkeys.

If you already have 2FA or a passkey configured, accessing the Security tab will prompt you to verify your identity before making changes. This protects your security settings from unauthorized access.

Two-Factor Authentication

Two-factor authentication adds a second step when you access sensitive pages. After signing in with your magic link, you may be asked to confirm your identity with a code from your authenticator app or a text message.

You can configure up to two 2FA methods: one authenticator app and one SMS number.

Setting Up an Authenticator App

An authenticator app generates a 6-digit code that refreshes every 30 seconds. Compatible apps include Google Authenticator, Microsoft Authenticator, and Authy.

1. On the Security tab, click Add 2FA Method.
2. Select Authenticator App and click Add Method.
3. Scan the QR code displayed with your authenticator app.
4. Enter the 6-digit code shown in your app and click Verify.

Your authenticator app method is active once the code is verified successfully.

Setting Up SMS Verification

SMS verification sends a one-time code to your mobile phone.

1. On the Security tab, click Add 2FA Method.
2. Select SMS Verification.
3. Enter your phone number with country code (for example, +12025551234).
4. Click Add Method. A verification code is sent to your phone.
5. Enter the code and click Verify.

Removing a 2FA Method

Click the trash icon next to any configured method to remove it. Removing all 2FA methods disables two-factor authentication for your account.

Passkeys

Passkeys let you sign in or verify your identity using your device’s built-in security features — such as Face ID, Touch ID, Windows Hello, or a hardware security key — without entering any code.

You can register up to 3 passkeys on your account.

Registering a Passkey

1. On the Security tab, find the Passkeys section.
2. Click Add Passkey.
3. Enter a name to identify this passkey (for example, “MacBook Pro” or “iPhone”).
4. Click Register Passkey.
5. Your browser will prompt you to verify with your device (fingerprint, face scan, PIN, or security key). Follow the on-screen instructions to complete registration.

The passkey is immediately usable after registration.

Removing a Passkey

Click the trash icon next to any registered passkey to remove it. If you lose a device, remove its passkey from this page to prevent it from being used to access your account.

Browser Compatibility

Passkeys require a modern browser with WebAuthn support. If your browser does not support passkeys, a message will appear on the Security tab and the passkey section will be unavailable. Updating to a current version of Chrome, Safari, Firefox, or Edge will add support.