Zum Inhalt springen
GigadriveDocs

Two-step verification

Add an authenticator app or emailed codes as a second step after your password or social sign-in.

Two-step verification asks for a second proof after your first factor succeeds. Gigadrive supports two: a time-based code from an authenticator app, and a code emailed to your account address.

Authenticator app

  1. Start the enrollment

    On account.gigadrive.de/security, choose Set up next to Authenticator app. Credentials proven in the last 15 minutes are required, so you may be asked to re-authenticate first.

  2. Scan the QR code

    Any TOTP app works. The key is also shown in text form if your app cannot use a camera. The parameters are SHA-1, six digits, a 30-second period.

  3. Enter the code it shows

    The factor stays pending until a code verifies. Only then does it become active and start being asked for at sign-in.

Five wrong codes lock verification for a minute. The counter is per account rather than per code, and a correct code clears it.

A code from the previous or next 30-second step is accepted, which covers a clock that drifted by a few seconds.

Emailed codes

Choose Enable next to Email verification. Nothing to scan and nothing to install: at sign-in you request a code, it arrives at your account address, and you type it in.

A code is six digits and lives 10 minutes. Five wrong guesses lock that code out, and a wrong guess does not extend its life, so the lockout runs down the remaining time rather than restarting the clock.

Email verification doubles as a first factor. Once it is on, the password screen offers Email me a sign-in link as a way past the password entirely.

Choosing a method at sign-in

When more than one second factor is enrolled, the sign-in screen picks the first and offers Try another way to switch. The list can hold an authenticator app, emailed codes, and a passkey used as a security key.

Turning it off

Disable the factor under Your verification factors. Disabling an authenticator app never locks you out, because it was never a way in on its own. Disabling email verification can, so that one is refused when it is your last sign-in method.