Signing in
Two-factor is required on every account. Which second factor you use is your choice, and you can register more than one.
Signing in
Enter your username and password. Cipher then asks for a second factor before it will open the workspace.
The second factor
Email codes
A six-digit code to your inbox. Always available with no setup — this is the floor, and the fallback if another factor fails.
Touch ID
Your fingerprint on this Mac. Nothing to carry or type, and the fastest option when the hardware is there.
Authenticator app
Google Authenticator, Authy, 1Password and similar. Works offline and moves with you between machines.
USB security key
Turns a USB drive into a hardware key. The drive must stay plugged in — pulling it locks the app immediately.
Register as many as you like under My account → Two-factor authentication. One is marked in use; the rest stay registered as backups you can switch to.
If you lose access
Forgot your password? on the sign-in screen sends a verification code to your registered email and lets you set a new one. Changing your password signs out every other session immediately.
Login restrictions
Administrators can restrict a member to specific IP addresses or time windows — useful for contractors, or for accounts that should only be used from an office network. See Team management.