Two-step verification and passkeys
Passkeys, authenticator apps, email codes and recovery codes.
Updated 5 November 2026
Two-step verification protects your account even if your password ends up in the wrong hands. The settings are under My account → Sign-in and security in your Merisaukko ID.
Passkeys (recommended) #
- Choose Add a passkey.
- Confirm with your device's fingerprint, face or PIN.
- Name the passkey, for example after the device.
A passkey works in every Merisaukko service. Add one for each device you use, or use a password manager that syncs passkeys between devices.
Authenticator app #
- Choose Authenticator app → Turn on.
- Scan the QR code with the app (e.g. Google Authenticator, Microsoft Authenticator or a password manager) or enter the key by hand.
- Enter the six-digit code shown by the app.
You also get recovery codes.
Email code #
You can also use a code sent by email as the second step. It is weaker than an authenticator app, because whoever controls the mailbox can get in.
Recovery codes #
A recovery code signs you in if your phone or authenticator app is lost. Each code works once. Keep them safe, for example in a password manager or on paper. Create new recovery codes invalidates the old ones.