Securing your customer portal login

A password only protects your customer account as long as nobody else knows it. With two-factor login, the portal asks for a code after the password that only your phone receives or generates. All settings for this are in your customer account under Security / 2FA.

The three methods at a glance

• Verification by SMS: After the password, you receive a six-digit code by SMS on your verified mobile number.
• Authenticator app: After the password, you enter the six-digit code from your app. The app needs neither a network connection nor SMS for this.
• Passkey: You sign in without a password and confirm with your face, fingerprint or device lock. A passkey is a separate way to sign in, not a second factor. Your password keeps working.

Setting up verification by SMS

1. Under Verification by SMS, click Verify number, enter your mobile number and confirm it with the code from the SMS.
2. Then click Switch on and confirm with your password. From now on, the portal asks for an SMS code every time you sign in.

Setting up an authenticator app

1. Under Authenticator app, start the setup. The portal shows a QR code and the key for manual entry.
2. Scan the QR code with the app or enter the key manually. Suitable apps include Google Authenticator, Microsoft Authenticator, Authy and FreeOTP, and on iPhone also the Passwords app.
3. Enter the six-digit code currently shown and click Activate.

The key is only shown during setup. For another device, the portal shows it again after you enter your password and a code from the app. Anyone with the key can generate codes for your account. Treat it like a password.

Creating a passkey

1. Under Passkey, enter a name for the device, such as “iPhone” or “Office PC”, and click Create passkey.
2. The browser asks for your face, fingerprint, Windows Hello or a security key. The passkey then appears in the list.
3. From then on, sign in on the login page with Sign in with passkey.

You can store a separate passkey for each device and remove individual ones again.

On iPhone with Safari

Using the code from the SMS

When the code arrives by SMS, the iPhone shows it above the keyboard as a suggestion From Messages. One tap enters the code and the login continues. There is no need to type it.

Generating codes with the Passwords app

Since iOS 18, the Passwords app generates the codes itself. An additional authenticator app is then not needed.

1. In your customer account under Security / 2FA, start the authenticator app setup and copy the key for manual entry.
2. In the Passwords app, open the entry for my.glowfish.de. If it is missing, create it with your customer number and password.
3. Choose Set Up Verification Code, then Enter Setup Key and paste the copied key. With a second device, Scan QR Code also works.
4. Enter the code now shown by the Passwords app in the portal and click Activate.

The next time you sign in, Safari suggests the code above the keyboard.

Passkey with Face ID

1. iCloud Keychain is required: in Settings under your name, iCloud, Passwords.
2. In your customer account under Security / 2FA, create a passkey and confirm the iPhone prompt with Face ID.
3. To sign in, tap Sign in with passkey and confirm with Face ID.

The passkey is stored in iCloud Keychain and is therefore also available on your other Apple devices with the same Apple ID.

New phone or app deleted

Before switching devices, set up the second factor on the new device while the old one still works. If that is no longer possible, write with your customer number to support@glowfish.de.

This is set up in your customer account under Security / 2FA. Go to the customer portal