Privacy and security
Two-step sign-in
An authenticator app for your own account; a rule that everyone must have one; what to do when a phone is lost.

Read it in the appThe same article opens from Help inside app.dotask.io, beside the screen it describes.
- Settings → Login → Set up an authenticator. Scan the code with Google Authenticator, 1Password, Authy or similar and enter the six digits.
- From then on, after your password or magic link, doTask asks for a code.
- Owners: Settings → Team → “Two-step sign-in for everyone”. Switch it on and any member without an authenticator is asked to set one up before the dashboard opens. You need your own first.
Lost phone
There are no backup codes. An owner opens Settings → Team and presses Reset two-step on the member; they sign in with a magic link and set up a new authenticator. If the owner is the one locked out, write to [email protected].