GivebearSecure your account
Add a passkey, turn on two-factor authentication, keep your backup codes safe, and sign out devices you do not recognize.
Your Givebear account is personal to you, separate from any organization you belong to. Account security settings protect the sign-in itself: passkeys, two-factor authentication, and the list of devices where you are signed in.
Open Account Settings from the bottom of the dashboard sidebar. The same page also holds your name, email, password, and connected sign-in providers.
Two-factor authentication and passkeys protect your own sign-in. An organization can also require two-factor authentication for every member. If one you belong to does, its dashboard shows a "Two-factor authentication required" notice until you turn it on here. Owners and admins set that requirement under Settings > Security; see settings, roles, and billing.
Add a passkey
A passkey lets you sign in with your device's unlock method (fingerprint, face, or PIN) or a hardware security key instead of typing a password.
In Account Settings, find the Passkeys card and select Add passkey.
Give the passkey a name you will recognize later, such as "Work laptop". If you leave it blank, Givebear names it "My device".
Select Continue and follow your browser's prompt to confirm with your fingerprint, face, PIN, or security key.
The new passkey appears in the list with the date you added it. Use the pencil to rename it, or the trash icon and Remove passkey to delete it. A removed passkey can no longer sign you in.
To use it, open the sign-in page and select Sign in with a passkey. The button appears only in browsers that support passkeys. Many browsers also offer your passkey directly in the email field's autofill.
Passkeys only work over HTTPS and are tied to givebear.io. If setup fails with a security error, check that you are on the real Givebear address and not a preview or local copy.
Turn on two-factor authentication
Two-factor authentication (2FA) adds a six-digit code from an authenticator app after your password. Givebear works with any app that supports time-based codes, such as Google Authenticator, 1Password, or Authy.
In the Two-Factor Authentication card, select Enable two-factor.
Enter your current password and select Continue.
Scan the QR code with your authenticator app. If you cannot scan, copy the key shown under "Or enter this key manually" into the app instead.
Type the six-digit code your app shows and select Verify and turn on.
Save the backup codes that appear. Use Copy or Download (the file is named givebear-backup-codes.txt), then select Done.
The card now shows On. The next time you sign in with your password, Givebear asks for a code before opening the dashboard. Any organization that requires two-factor authentication opens for you again.
Sign in with two-factor on
After your password, the Two-factor verification page asks for the six-digit code from your app. Check Trust this device for 60 days on a computer you own to skip the code on that browser for two months.
If you do not have your phone, select Use a backup code instead and enter one of your saved codes.
Backup codes
Givebear generates 10 backup codes when you turn on 2FA. Each code works once. They are shown only at that moment, so store them somewhere safe, such as a password manager.
To get a fresh set, open the Two-Factor Authentication card and select Regenerate backup codes. Enter your password, then select Generate new codes. The old codes stop working as soon as the new ones exist.
Turn two-factor off
Select Disable in the Two-Factor Authentication card, enter your password, and confirm with Disable two-factor. Your authenticator entry and backup codes stop working immediately. If an organization you belong to requires two-factor authentication, its dashboard shows the requirement notice again until you turn it back on.
If you lose both your authenticator app and your backup codes, you cannot finish signing in on your own. Contact support from the email on your account.
Review where you are signed in
The Active Sessions card lists every browser where your account is signed in. Each row shows the browser and operating system, the IP address, and when that session started. Your current browser is marked Current.
- To sign out one device, select the X on its row. You cannot revoke the session you are using right now.
- To sign out everywhere else at once, select Sign out all others. The link appears only when more than one session exists.
Changing your password also signs out every other session automatically.
Change your password or email
Both live in the Profile Information and Change Password cards on the same page.
- A new password needs at least 8 characters, including a letter and a number, and must differ from the current one.
- To change your email, select Change email and enter the new address. Givebear sends a confirmation link to your current address first. The change applies only after you follow that link.
Connected sign-in providers
The Connected Accounts card shows how you can sign in: with email and password, and with Google when your Givebear deployment offers it. Select Connect Google to link a Google account, or disconnect a linked provider from the same card.