> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stora.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Secure your Developer Portal account

> Set up an authenticator app, save recovery codes, add passkeys, and recover access to your account.

The Developer Portal requires multi-factor authentication. Set up your authenticator app before you manage applications or operator credentials.

## Set up your authenticator app

After you create your account or have its MFA reset, the portal opens **Set up an authenticator app**.

1. Open an authenticator app that supports time-based one-time passwords, such as 1Password, Bitwarden, or Google Authenticator.
2. Scan the QR code. If you cannot scan it, enter the setup key shown in the portal.
3. Enter the six-digit code from your authenticator app in **Verification code**.
4. Click **Continue**.
5. Save the recovery codes in a secure location that you can access without your authenticator app.
6. Click **Continue** to open the portal.

Each recovery code works once. Do not share your authenticator setup key or recovery codes with teammates. Each teammate needs a separate Developer Portal account.

## Add a passkey

1. Open **Settings**, then **Security**.
2. Under **Passkeys**, click **Add passkey**.
3. If the portal asks you to confirm access, use a passkey or enter an authenticator code.
4. Follow your browser's prompt to create the passkey.

The passkey appears in the list. Use the edit action beside the passkey to give it a label that identifies its device or password manager.

To remove a lost or unused passkey, click its remove action and confirm. That passkey can no longer sign in to your account.

## Replace your recovery codes

> [!WARNING]
>
> Generating new recovery codes invalidates the previous set. Save the new codes before you leave the result page.

1. Open **Settings**, then **Security**.
2. Click **Regenerate recovery codes**.
3. If prompted, confirm access with a passkey or an authenticator code.
4. Store the new codes securely. Replace any saved copy of the previous set.

## Sign in when your authenticator is unavailable

If you have a registered passkey, use the passkey sign-in option.

Otherwise, sign in with your account credentials. On **Verify your identity**, click **Use recovery code**, enter an unused code, and click **Continue**.

If you have no working passkey, authenticator, or recovery code, ask a developer-company admin whether they can reset your MFA.

## Request an MFA reset

An admin can reset MFA for another team member who does not have the **Admin** role. An admin cannot use this action for themselves or another admin. If no eligible admin can help, contact Stora for account recovery assistance.

To reset an eligible member's MFA:

1. Open **Team Members**.
2. Find the member and click **Reset MFA**.
3. Confirm the reset for that account.

The reset removes the account's authenticator configuration, recovery codes, and passkeys. The member must set up an authenticator app again when they next access the portal.

For invitations and role changes, see [Manage your developer company and team](https://docs.stora.co/2025-09/guides/developer-company-and-team.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.