Skip to main content
The Developer Portal requires multi-factor authentication. Set up your authenticator app before you manage applications or operator credentials.

​
Set up your authenticator app

After you create your account or have its MFA reset, the portal opens Set up an authenticator app.
  1. Open an authenticator app that supports time-based one-time passwords, such as 1Password, Bitwarden, or Google Authenticator.
  2. Scan the QR code. If you cannot scan it, enter the setup key shown in the portal.
  3. Enter the six-digit code from your authenticator app in Verification code.
  4. Click Continue.
  5. Save the recovery codes in a secure location that you can access without your authenticator app.
  6. Click Continue to open the portal.
Each recovery code works once. Do not share your authenticator setup key or recovery codes with teammates. Each teammate needs a separate Developer Portal account.

​
Add a passkey

  1. Open Settings, then Security.
  2. Under Passkeys, click Add passkey.
  3. If the portal asks you to confirm access, use a passkey or enter an authenticator code.
  4. Follow your browser’s prompt to create the passkey.
The passkey appears in the list. Use the edit action beside the passkey to give it a label that identifies its device or password manager. To remove a lost or unused passkey, click its remove action and confirm. That passkey can no longer sign in to your account.

​
Replace your recovery codes

Generating new recovery codes invalidates the previous set. Save the new codes before you leave the result page.
  1. Open Settings, then Security.
  2. Click Regenerate recovery codes.
  3. If prompted, confirm access with a passkey or an authenticator code.
  4. Store the new codes securely. Replace any saved copy of the previous set.

​
Sign in when your authenticator is unavailable

If you have a registered passkey, use the passkey sign-in option. Otherwise, sign in with your account credentials. On Verify your identity, click Use recovery code, enter an unused code, and click Continue. If you have no working passkey, authenticator, or recovery code, ask a developer-company admin whether they can reset your MFA.

​
Request an MFA reset

An admin can reset MFA for another team member who does not have the Admin role. An admin cannot use this action for themselves or another admin. If no eligible admin can help, contact Stora for account recovery assistance. To reset an eligible member’s MFA:
  1. Open Team Members.
  2. Find the member and click Reset MFA.
  3. Confirm the reset for that account.
The reset removes the account’s authenticator configuration, recovery codes, and passkeys. The member must set up an authenticator app again when they next access the portal. For invitations and role changes, see Manage your developer company and team.