Two-step verification (also called two-factor authentication or 2FA) adds a second check to your sign-in process. Even if someone obtains your password, they can't access your account without the second factor. We strongly recommend enabling it given the sensitivity of health data. Once set up, also review securing your account and managing active sessions to complete your security setup.
How to enable two-step verification
- Go to Settings > Security
- Tap Enable two-step verification
- Choose your preferred second factor — SMS code or authenticator app
- If you choose SMS: enter your mobile number and confirm the code sent to it
- If you choose an authenticator app (Google Authenticator, Authy, etc.): scan the QR code shown in Looms, then enter the six-digit code the app generates to confirm setup
- Save your backup codes in a safe place — these are one-time codes that let you sign in if you lose access to your second factor
Signing in with two-step verification
- Enter your email and password as usual
- You'll be prompted for your second factor
- Open your authenticator app (or check your SMS) for the current code
- Enter the code within 30 seconds — codes expire after that
- Tick 'Remember this device for 30 days' on trusted personal devices to reduce the frequency of prompts
If you lose access to your second factor
- Use one of your saved backup codes to sign in
- Contact Looms support to verify your identity and reset your second factor
- Identity verification for account recovery requires you to confirm details that match your registered profile
Changing or removing two-step verification
Two-step verification can be changed or removed at any time in Settings > Security. You'll need to pass your current second-factor check before making changes. If your phone number changes, update it before the old number becomes unreachable — otherwise you may be locked out.