Skip to content

Cookies on bricknity

We use the cookies the site needs to work: to keep you signed in and to remember your choices. With your permission we also count visits with our own analytics and test new versions of screens — if you create an account, your earlier visits are linked to it. No advertising and no third-party tracking. Cookie policy

bricknity
Create
Search builds, makers, collections…Create
Help centre

Help centre

Two-factor sign-in: authenticator app and recovery codes

Two-factor adds a 6-digit code from an authenticator app to signing in, so your password alone is not enough. Turn it on in Settings → Security. It is optional, for every account.

Signed inReviewed 6 Oct 2026
In this article5 sections

Turn it on

Open Settings → Security and choose Turn on two-factor. We ask for your password first, so nobody using a session you left open can link their own phone.

Scan the QR code with an authenticator app — Google Authenticator, Microsoft Authenticator, 1Password or any other — or type the key shown under it. Then enter the 6-digit code the app shows. You stay signed in here; every other device is signed out.

If you joined with Google, Facebook or Apple and have no password, turn it on within ten minutes of signing in.

Signing in with two-factor

After your password, or after Google, Facebook or Apple, we ask for the code from your app. A code works once and changes every 30 seconds.

Tick Trust this device for 30 days on a computer or phone only you use: that browser skips the code for 30 days. Leave it unticked on a shared or school computer.

Recovery codes

When you turn two-factor on we show ten recovery codes, once. Each one signs you in a single time if your phone is lost or broken — choose Use a recovery code instead on the code screen. Copy or download them and keep them somewhere safe.

Running low? New recovery codes in Settings → Security makes ten fresh ones; every old code stops working. It needs a code from your app.

Turn it off

Turn off two-factor in Settings → Security needs a code from your app or a recovery code. Devices you trusted are forgotten at the same time.

We email you whenever two-factor is turned on or off, and whenever a recovery code is used. If that was not you, reset your password straight away.

Lost your phone and your codes

Without the app and without a recovery code, only support can turn two-factor off. We check that the account is yours first, and we never do it by email alone — a stolen mailbox would otherwise be a way round two-factor.