Two-factor authentication (2FA) for user accounts

Who can do it: Team members Which plans: Free, Starter, Business, Enterprise, Education Which platforms: Browser for setup; sign-in on Browser, Desktop, Mobile

Two-factor authentication (2FA) adds a second step when you sign in to Miro. After your usual first step, you enter a 6-digit code from an authenticator app on your phone.

You can turn 2FA on for your own account and turn it off again at any time.

Two ways to use 2FA in Miro

• Account 2FA (this article): You turn 2FA on or off for your own Miro account. It's available on all plans.
• Organization 2FA: On Business and Enterprise plans, an admin can require 2FA for everyone in the organization. When this is on, you must use 2FA, you can't turn it off, and the admin can reset it for you. To learn more, see Two-factor authentication (2FA) or Enterprise two-factor authentication (2FA) – admin guide.

Before you start

Install an authenticator app on your phone. These apps generate a time-based one-time password (TOTP) code.

For example, you can use any of the following apps. This list is not exhaustive:

• Apple Passwords
• Google Authenticator
• Microsoft Authenticator
• Authy
• 1Password
• Proton Authenticator

Turn on 2FA

1. Click your profile icon in the top-right corner and select Profile Settings | Settings.
2. Under Profile settings, scroll to find Two-factor authentication and switch it on.
3. Click I have an authenticator app.
4. Add Miro to your authenticator app in one of two ways:
   • Scan the QR code: Open your authenticator app, scan the code on your screen, then click I scanned the code.
   • Enter the code manually: Click Can't scan QR code?, copy the code Miro shows, paste it into your authenticator app, then click I added the code.
5. Enter the 6-digit code from your authenticator app and click Verify code.
6. Save your recovery code.
7. Click Continue.

Save your recovery code somewhere safe. It's the only way to reset 2FA yourself if you lose access to your authenticator app. Miro Support can't recover it for you.

Sign in with 2FA

Each time you sign in using any method except social, SSO, and passkey, Miro asks for the 6-digit code from your authenticator app after your usual first step. Open the app, read the current code, and enter it.

The code changes every 30 seconds. You have 3 attempts before you need to restart the sign-in process.

Trust this device

On a device that only you use, select Trust this device when you sign in. Miro then skips the 2FA step on that device for 30 days.

If you trust a device by mistake, go to Settings. Under Profile Settings click Sign out of everywhere.

You'll also be asked for a code again when you sign in on a new device or after you clear your browser cookies.

Don't trust a shared or public computer.

Reset 2FA

If you can't sign in because you no longer have access to your authenticator app, reset 2FA from the sign-in screen.

If you have your recovery code

1. On the 2FA screen, click Reset two-factor authentication.
2. Enter the recovery code you saved during setup.
3. Set up 2FA again to add Miro to your authenticator app. Miro gives you a new recovery code. Save it. Your old code no longer works.

If you don't have your recovery code

You cannot reset your own 2FA without a recovery code. You can still sign in using a social profile.

Turn off 2FA

1. Click your profile icon in the top-right corner and select Profile Settings | Settings.
2. Under Profile settings, scroll to find Two-factor authentication and switch it off.
3. Confirm.

Miro no longer asks for a code when you sign in. You can turn 2FA on again at any time, either with a new authenticator setup or with your previous authenticator app, if you still have access to it. You can use the old authenticator entry.

If you can't see the switch, an organization you belong to requires 2FA and only an admin can change it.

Frequently asked questions