Password, passkeys and two-factor

Your Wyroo account holds the plans, files and conversations for real building and interior jobs. This page shows you how to keep it safe: how to change your password, how to sign in without one using a passkey, and how to add two-factor authentication for an extra layer of protection. None of it is complicated, and you can set it all up in your settings.

What you can do here

All of these live in your security settings:

• Change your password. Update the password you use to sign in.
• Add passkeys. A passkey lets you sign in with your fingerprint, face or a security key instead of a password.
• Turn on two-factor authentication (2FA). This asks for a short code from an app on your phone, on top of your password.
• Keep recovery codes. These are backup codes that let you back in if you lose your phone.

Tip: You do not have to do everything at once. A strong password is the baseline. Passkeys or 2FA add real protection, so turn at least one of them on when you have a minute.

How to change your password

1. Open your security settings.
2. In the password section, type your current password.
3. Type your new password, then type it again in the confirm field so a typo cannot lock you out.
4. Select Save.

You can use the small eye icon in each box to reveal what you typed and check it. Pick a password you do not use anywhere else. A longer phrase you can remember beats a short, tricky one.

How passkeys work

A passkey is a passwordless way to sign in. Instead of typing a password, you unlock your account the same way you unlock your phone or laptop: a fingerprint, your face, a screen PIN, or a small hardware security key. The secret never leaves your device, so there is nothing to phish or guess.

To add a passkey:

1. Open your security settings and find the passkeys section.
2. Give the passkey a name so you can recognise it later, for example “Work laptop” or “My phone”.
3. Select Add passkey.
4. Follow the prompt from your device or browser to confirm with your fingerprint, face or PIN.

The new passkey appears in the list with the date it was last used. You can add more than one (handy if you switch between a phone and a laptop), and you can remove any of them with the delete button next to it.

To sign in with a passkey: on the login screen, choose the Sign in with a passkey option and confirm on your device. No password needed.

Tip: Passkeys are tied to the device you create them on, so set one up on each device you use Wyroo from. Keep your password or 2FA recovery codes as a backup in case a device is unavailable.

How to turn on two-factor authentication

Two-factor authentication (2FA) means that after your password, Wyroo also asks for a six-digit code that changes every few seconds. You get that code from an authenticator app on your phone, such as Google Authenticator or Authy.

1. Open your security settings and find the two-factor authentication section.
2. Select Enable 2FA.
3. A box with a QR code appears. Open your authenticator app and scan the code. If you cannot scan, choose enter the code manually and type the key the app shows. There is a copy button to make this easy.
4. Your app now shows a six-digit code. Type that code into Wyroo and select Confirm.

From now on, signing in asks for a fresh code from your app after your password.

To turn it off later, return to the same section and select Disable 2FA.

Recovery codes: your backup

When 2FA is on, Wyroo gives you a set of single-use recovery codes. If you ever lose access to your phone, you can sign in with one of these instead of an app code.

1. In the two-factor section, select View recovery codes.
2. Copy them somewhere safe, such as a password manager or a printed note kept away from your computer.
3. Each code works only once. If you run low or think they have been seen, select Regenerate codes to get a fresh set (the old ones stop working).

Tip: Save your recovery codes the moment you turn on 2FA. They are the thing that gets you back in if your phone is lost, and you cannot view a code twice without regenerating the whole set.

Confirming sensitive changes

When you change security settings, Wyroo may ask you to confirm it is really you before saving. You can confirm with your password, or, if you have a passkey, with a single passkey tap. This stops someone from changing your protection if they walk up to an unlocked screen.

For the rest of your account, see Create your account and get set up for sign-up and language, and Notifications for how Wyroo keeps you posted.