← back to blog
    Berner SetterwallOctober 14, 20262 min read

    Two-Step Verification and Signed-In Devices for Cogny Accounts

    Your Cogny account reaches your ad accounts, analytics and the changes your agents make to them. A password alone is a thin lock on that. Cloud accounts now have a Security tab under Settings → Account with two controls.

    Two-step verification

    Turn it on and Cogny asks for a six-digit code from an authenticator app after every sign-in, whether you signed in with a password, with Google or with an email link.

    • Any authenticator app works: Google Authenticator, Microsoft Authenticator, 1Password, Authy, Bitwarden, or anything else that reads a standard QR code.
    • Up to ten authenticators. Add a second one as your backup. Cogny has no printed backup codes, so a second phone or a password manager is how you keep access if one device is lost.
    • It covers more than the app screen. With two-step verification on, creating an API key for your AI client or approving a new client's access over OAuth also requires a session where the code was entered. A stolen password can't be turned into a long-lived key.
    • Removing an authenticator needs a session where the code was entered too.

    If you lose every authenticator, email support from your account address and we'll verify it's you before turning two-step verification off.

    Where you're signed in

    The same tab lists every browser and device signed in to your account: the browser and operating system ("Chrome on macOS"), the IP address, when it was last active, and when it signed in. The one you're using is marked.

    • Sign out next to any device ends that session. It can't renew its sign-in and has to sign in again.
    • Sign out everywhere else ends every session except the one you're on. Use it after signing in on a shared computer, or when a laptop goes missing.

    AI clients connected over MCP use their own keys and aren't affected by signing out devices. Revoke those under Settings → Connect AI Clients.

    Ask the voice agent

    The voice agent in the app can answer "is two-step verification on?" and "where am I signed in?", and sign out a device or every other session once you confirm. Turning two-step verification on needs the QR scan, so it opens the Security tab for that.

    Who gets it

    Security settings are part of Cloud. On Free, Solo, Cogny AI and Cogny Pro the tab is visible in Settings but locked. The settings belong to your account, not a workspace: turn two-step verification on once and it applies to every workspace you sign in to.