What is it and do I have to?
Two-step verification adds an extra check when you log in, so someone who knows your password still cannot get in. It is optional. We recommend it for everyone who sells, receives payments or has a business account.
You can choose between two methods, and you can use both:
- Passkey (recommended). You log in with the fingerprint, face or PIN of your phone or computer, the same way you unlock it. No codes to type, and it cannot be phished. You can even log in without your password: on the login page, choose Log in with passkey.
- Authenticator app. An app such as Google Authenticator, Microsoft Authenticator or 1Password shows a new six-digit code every 30 seconds. You type that code after your password.
Step 1: confirm your mobile number
Before you can set up a passkey or app, we ask for your mobile number. That number is your way back in when you lose your phone or your passkey: we then text you a code. Go to Dashboard → Account → Security, enter your number and type the code from the text message.
Step 2: add a passkey
On the same page, under Passkeys, enter your current password and click Add passkey. Your device then asks you to confirm with your fingerprint, face or PIN. That is all. Click Try it now to check that it works.
On an iPhone or iPad
Use Safari. The passkey is saved in your iCloud Keychain, so it also works on your other Apple devices. iOS 16 or newer is required.
On an Android phone
Use Chrome. The passkey is saved in your Google Password Manager and works on every device where you are logged in with that Google account. Android 9 or newer is required.
On a Windows computer
Use Chrome or Edge. Windows Hello asks for your PIN, fingerprint or face. The passkey stays on that computer, so add a second one on your phone as well.
On a Mac
Use Safari or Chrome. Touch ID or your Mac password confirms it. With Safari the passkey is shared with your iPhone through iCloud.
Using a password manager
1Password, Bitwarden, Dashlane and others can store passkeys too. When they are installed in your browser, they offer to save the passkey; you then have it on every device where the manager is installed.
Step 2 (alternative): the authenticator app
Under Prefer a code app? enter your password and click Set up authenticator app. Scan the QR code with the app, or type the key by hand, and enter the code the app shows. From then on we ask for a code after your password.
Logging in
- With a passkey: click Log in with passkey on the login page, or pick your passkey when the browser offers it in the e-mail field. No password needed.
- With your password: after the password we ask for your passkey or the code from your app.
I lost my phone or my passkey
Log in with your e-mail address and password. On the next page, choose No access to your app or passkey? and we text a code to your recovery number. After logging in, add a new passkey on the device you are using now and remove the old one under Security.
You then receive an e-mail about the login by text message. Was it not you? Click This was not me in that e-mail: every session is logged out and the text message route is locked until our helpdesk releases it.
I lost my phone and I also have a new number
Contact us via the chat at the bottom right. We check who you are (for example with an order, the last digits of your IBAN or your NABV card) and then switch two-step verification off, so you can log in with your password and set it up again.
Switching it off
Under Dashboard → Account → Security you remove your passkeys and disable the authenticator app with your current password (or with your passkey). You receive an e-mail for every change, in case someone else did it.