Security
Two-Factor Authentication
Two-factor authentication (2FA) adds a TOTP code after your password. Manage it on Settings → Account under Two-factor authentication — the same page as your profile, not a separate Security submenu.
Email/password accounts are required to complete 2FA setup. The Account page also has Require 2FA on email-code sign-in if you want the authenticator prompt when you sign in with an emailed code (skipped by default).
Supported authenticator apps
Google Authenticator
Free, iOS & Android. Simple and widely used.
Authy
Free, iOS, Android & desktop. Supports encrypted backup across devices.
1Password
Paid, all platforms. TOTP built into your existing password manager.
Any TOTP app
Any RFC 6238-compliant authenticator works — Bitwarden, Dashlane, and others.
2FA login flow
Step 1: Enter email + password
Standard credential verification
Step 2: Enter 6-digit code
Code refreshes every 30 seconds
Lost your authenticator
If you can still sign in, use Reset 2FA on Settings → Account and pair a new app. If you are locked out, contact support so an admin can reset 2FA on the account. There is no recovery-code download in the dashboard.
SSH keys and API tokens
SSH keys on the account are for git fetch over ssh.stackblaze.app:2222, not for API login. API automation uses a kbr_pat_ token from Settings → API tokens.
# Generate an SSH key pair if you don't have one
$ ssh-keygen -t ed25519 -C "me@example.com"
# Add the public key in the dashboard
# Settings → SSH keys → paste ~/.ssh/id_ed25519.pub
# API access is a Bearer token, not SSH
export STACKBLAZE_TOKEN=kbr_pat_…
Step by step
Open Settings → Account
Two-factor authentication is on the same Account page as your profile and password — not Avatar → Account Settings → Security. Email accounts are asked to set 2FA up the first time they sign in.
Scan the QR code
On first setup (or after Reset 2FA), StackBlaze shows a QR code. Add the account in Google Authenticator, Authy, 1Password, or any TOTP app. You can paste the secret key if you cannot scan.
Verify the 6-digit code
Enter the current code from the app. That confirms the authenticator is paired. Codes rotate every 30 seconds.
Reset if you change devices
On Settings → Account, click Reset 2FA, confirm your password, then pair a new authenticator. The old app stops working as soon as the new secret is saved.
Sign in with 2FA
After email and password, enter the 6-digit code. Optionally turn on Require 2FA on email-code sign-in on the same Account page if you also use emailed login codes.