Skip to main content

Step 8: Security Setup - Authentication Methods

K
Written by Karen Chan
Updated over a week ago

Why additional security matters

After creating your VerifiMe Wallet, setting up enhanced security credentials protects your identity and allows you to access your wallet more easily in the future.

Authentication method options

You have two choices for secure wallet access:


Option 1: Authenticator App (TOTP)

Authenticator apps generate time-based one-time passwords that provide an extra layer of security.

How authenticator apps work:

  1. Download an authenticator app on your smartphone:

    • Google Authenticator

    • Microsoft Authenticator

    • Authy

    • Other TOTP-compatible apps

  2. During VerifiMe setup, scan the QR code displayed on screen with your authenticator app

  3. The app will generate a new 6-digit code every 30 seconds

  4. When logging into VerifiMe in the future:

    • You'll receive a magic link via email (as usual)

    • You'll also need to enter the current 6-digit code from your authenticator app

    • This confirms you have both your email access AND your physical device

Benefits of authenticator apps:

  • ✓ Free and widely available

  • ✓ Works without cellular or internet connection

  • ✓ Can be backed up (depending on the app)

  • ✓ Generates codes every 30 seconds

  • ✓ Can manage multiple accounts in one app

Important reminders:

  • Keep your smartphone secure with a PIN or biometric lock

  • Back up your authenticator app if possible

  • If you lose your device, contact VerifiMe support immediately


Option 2: Passkey (Modern Security Standard)

Passkeys are the newest and most secure authentication method, using your device's built-in security features.

How passkeys work:

  1. During VerifiMe setup, choose to register a passkey

  2. Your device (phone, laptop, or tablet) creates unique cryptographic credentials

  3. These credentials are stored securely on your device using:

    • Biometric authentication (fingerprint, facial recognition)

    • Device PIN or pattern

    • Hardware security (like Secure Enclave on iPhone or TPM on computers)

  4. When logging into VerifiMe in the future:

    • Click the magic link in your email

    • Use your device biometric (fingerprint/face) or PIN to authenticate

    • No codes to type or remember

Benefits of passkeys:

  • ✓ Most secure authentication method available

  • ✓ Very easy to use - just use your fingerprint or face

  • ✓ No passwords or codes to remember

  • ✓ Extremely resistant to phishing attacks

  • ✓ Fast authentication

  • ✓ Cannot be intercepted or stolen remotely

Device compatibility: Passkeys work on modern devices including:

  • iPhone (iOS 16+)

  • Android phones (Android 9+)

  • Mac computers (macOS Ventura+)

  • Windows computers (Windows 10+)

  • Modern web browsers (Chrome, Safari, Edge, Firefox)

Important considerations:

  • Passkeys are tied to specific devices

  • You can register multiple devices (recommended)

  • If you lose access to all registered devices, you'll need support assistance

  • Passkeys may require device updates to work properly


Choosing your authentication method

For most users, passkeys are recommended because:

  • Easier to use (no typing codes)

  • More secure

  • Faster login experience

  • Built into modern devices

Authenticator apps are a good choice if:

  • Your device doesn't support passkeys

  • You prefer traditional MFA methods

  • You want to use a method you're already familiar with

  • You want flexibility to use multiple devices easily

You can also use both:

  • Set up both an authenticator app AND a passkey

  • This provides backup options if one method is unavailable

  • Use whichever is most convenient at login time


Setting up your chosen method

During wallet creation:

  1. After completing identity verification, you'll see the security setup screen

  2. Choose your preferred authentication method

  3. Follow the on-screen instructions for your chosen method

  4. Test your setup by logging out and logging back in

If you skip this step:

  • You can still access VerifiMe using only magic links (email-based)

  • You can add enhanced security later from your wallet settings

  • Some service providers may require enhanced security for certain features

  • Enhanced security is highly recommended for protecting your identity

Did this answer your question?