Securing your account

For every BUZ user · ~5 min read

My Profile → Security Settings is where you add a second step to your login, so a stolen password isn’t enough to get into your BUZ. You can use a passkey, an authenticator app, or codes sent to your mobile.

If your organisation requires it

Some organisations make multi-factor authentication compulsory. If yours does, you’ll see “To continue, your organization requires you to set up multi-factor authentication” and you’ll need to complete setup before you can carry on.

Figure 1 — Security Settings. The card at the top manages the authenticator app — reset it when you change phones, or disable it. (1) The Passkey section under Additional verification methods: Add a passkey uses Face ID, a fingerprint or a security key, and each registered passkey is listed with Remove. (2) A mobile number lets BUZ text you a code as a fallback.

Which method should you use?

Method	Security	Best for
Passkey — Face ID, fingerprint or a security key	Strongest. Phishing-resistant	Everyone. Use this if your device supports it
Authenticator app — a 6-digit code that rotates	Strong	Shared or older devices
SMS to your mobile	Good — better than nothing	A fallback when the others don’t suit

Set up two

Register a passkey and one other method. If you lose the device with your passkey, the second method is how you get back in without calling support.

Add a passkey

A passkey uses the security your device already has — Face ID, a fingerprint, your screen lock, or a hardware security key. There’s no code to type and nothing to remember.

1. Go to My Profile → Security Settings.
2. Under Additional verification methods, find Passkey (Face ID / fingerprint / security key).
3. Select Add passkey.
4. Your device prompts you — use your face, fingerprint, PIN or security key.
5. The passkey appears in your list.

Your registered passkeys are listed with a Remove option beside each.

One per device

Add a passkey on each device you regularly use — laptop and phone. Each is independent, so losing one doesn’t lock you out of the other.

Set up an authenticator app

You’ll need an authenticator app on your phone — Microsoft Authenticator, Google Authenticator, Authy or similar.

1. On Security Settings, start the authenticator setup.
2. Scan the QR code with your authenticator app.
3. Enter the 6-digit code the app shows, to confirm it’s working.
4. Setup is confirmed.

From then on you’ll be asked for the current code when you log in.

You can also reset, re-enable or disable the authenticator from this screen — reset is what you use when you’ve changed phones.

Changing phones?

Set up the authenticator on your new phone before wiping the old one. Without the old device or another method registered, you’ll need support to get back in.

Add your mobile number

Enter your mobile under Additional verification methods and BUZ can text you a code at login.

Make sure the number is one you’ll have access to — it’s no help on a phone in a drawer.

Common questions

Question	Answer
“Add passkey” does nothing	Your browser or device may not support passkeys. Try a current browser, or use an authenticator app.
Authenticator codes rejected	The phone’s clock has drifted. Turn on automatic date and time and try again.
Lost the phone with my authenticator	Use another registered method. If you have none, contact your BUZ administrator.
I don’t want MFA	If your organisation requires it, it can’t be skipped. Otherwise you can disable the authenticator, but it’s a bad trade.
Removed a passkey by mistake	Just add it again — nothing else is affected.