Two-factor authentication means a password alone isn't enough to reach your financial data. Earmarkr offers two methods, managed under Two-factor authentication on your profile.
| Method | Default | Strength |
|---|---|---|
| Email magic link | On | Good |
| Authenticator app | Off until you enrol | Stronger |
Email magic link
On by default. At sign-in, we email you a link; opening it completes the sign-in.
Nothing to set up, and nothing to lose. Its limitation is that it's only as secure as your email account — anyone who can read your inbox can complete a sign-in.
Authenticator app
A six-digit code from an app on your phone, refreshing every 30 seconds. Works offline and isn't tied to your inbox.
To enable it:
- Open Profile → Two-factor authentication.
- Start the authenticator setup.
- Scan the QR code with your app — Google Authenticator, 1Password, Authy, Bitwarden, and any other TOTP app all work.
- Enter the current code to confirm.
Confirming proves the app is working before it's required, so enrolment can't lock you out.
Choosing your default
With both enabled, Default at sign-in decides which you're asked for. You can still use the other.
Set the authenticator app as your default if you have it — it's the stronger of the two, and it works when your email doesn't.
Signing in with Google or Microsoft
Single sign-on satisfies two-factor by itself. Your identity provider already verified you, and almost certainly applied its own second factor, so Earmarkr doesn't ask again.
If you lose your authenticator
Sign in with the email magic link instead — this is exactly why it stays available — then re-enrol a new device from your profile.
If you've lost access to both your authenticator and your email, contact support. Expect identity questions before anything is changed; a support process that reset two-factor on request would defeat the point of having it.
Turning it off
Two-factor is required and can't be switched off entirely. You can change which method is your default, and turn off the authenticator app if you'd rather use email links, but there's no password-only mode.
For an app holding your complete financial picture and connected to your bank, that isn't a setting worth offering.