How do I set up Face ID, a fingerprint or an authenticator app for sign-in?

Open Settings > Sign-in & alerts. Add a passkey for Face ID or fingerprint sign-in, or an authenticator app for a second step with a phone code.

Where: Settings > Sign-in & alerts

Who can do this: Owners, Managers, Front desk staff, Website helpers

There are no passwords in NinjaHQ. Two optional features make signing in faster and safer: a passkey (your face, fingerprint or screen lock) and an authenticator app.

Before you begin

Each person sets these up for themselves, on their own device. The page is called Sign-in & alerts and is under Settings in the menu.
A passkey belongs to this gym's web address and the device (or password manager) it was saved to.

Steps

Add a passkey

Open Sign-in & alerts.
In Sign in with your face or fingerprint, press Set up Face ID or fingerprint sign-in. If you already have one, the button says Add a passkey on this device.
Follow your device's prompt (Face ID, fingerprint or screen lock).
After a code sign-in you may see "You're in! One more tap and you'll never need a code again". Press Set it up now, or Not now to be asked again later.
To remove a passkey, press Remove beside it in the list. The emailed code still works.

Add an authenticator app

In the Authenticator app card, press Set up an authenticator app.
Open an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy or similar). Scan the QR code. If you cannot scan, choose "enter a setup key" and type the key shown.
Type the 6-digit code the app shows into Code from your app and press Turn it on.
Save your recovery codes right away. Each works once, if your phone is lost. They are shown only this one time. Use Copy or Download, then press I've saved them.
From now on, after the emailed code the sign-in page asks for Code from Your Authenticator App.

Later

Make new recovery codes: type a code from your app and press the button. The old codes stop working.
Turn it off: type a code from your app (or a recovery code) and press Turn off the authenticator app. You cannot turn it off if your gym requires it.

What you'll see

The card says On with the date it started and how many recovery codes are left. When only a few remain, it suggests making new ones.

Troubleshooting

The passkey button is missing. Your browser may not support passkeys. Try Safari on an iPhone, Chrome on Android, or a recent browser on a computer.

My code is rejected. Authenticator codes work once and change every 30 seconds. Wait for the next code. Check your phone's clock is set automatically.

I lost my phone. On the sign-in page, type one of your recovery codes instead. Or ask an owner to reset your app under Staff.

Questions

If I add a passkey, do I still need my emailed code?

No, but the emailed code always keeps working as a backup.

Does a passkey skip the authenticator app step?

Yes. A passkey already counts as two factors, so it skips the app step.

Can I make everyone use an authenticator app?

Owners can. Open Settings > Staff, find Sign-in security, tick Require an authenticator app for everyone and press Save. Anyone without one is sent to set it up before they can use the back office. You need your own app first.

I changed phones. How do I move my authenticator app?

Ask an owner to reset it under Settings > Staff (Reset app), then set it up again on the new phone.