Two-Factor Authentication and Backup Codes

Applies to CoCoCo ID as of 23 September 2026 (source version control v3.4.0). CoCoCo ID is only available in English.

Two-factor authentication (2FA) adds a second step to signing in: after your password, you enter a 6-digit code from an authenticator app on your phone.

Turn on 2FA

1. At id.cococo.tech, click your name at the top right and choose Security. (Or: Manage your ID → under Sign-in security, Two-factor authentication.)
2. Scan the QR code with your authenticator app. If you can’t scan it, type the key shown under Can’t scan? Enter this key in your app: into the app.
3. Enter the 6-digit code the app shows and click Turn on 2FA.
4. CoCoCo ID now shows Your backup codes: ten codes, each of which works once. They are shown only this one time. Save them, for example with Save as PDF, and click I’ve saved my codes.

The 2FA page now says 2FA is on and how many backup codes you have left.

Signing in with 2FA

After your email and password, the page Two-step verification asks for the 6-digit code from your app. If you have lost your phone, click Use a backup code and enter one of your backup codes. Each backup code can be used only once; the 2FA page shows how many remain.

If you have set up a passkey, you can use Use a passkey on the same page instead.

Turn off 2FA

1. Click your name at the top right and choose Security.
2. Under Confirm with a current code to turn it off, enter a current code from your app or a backup code.
3. Click Turn off two-factor. The message Two-factor authentication is off. confirms it.