Start free

Two-step sign-in (2FA)

Protect your account with a 6-digit code from an authenticator app, plus 10 one-time recovery codes.

Teams & security
Sign-in security section in SettingsSign-in security section in Settings
A real quietstats screen, taken with a throwaway test account that was deleted afterwards.

What it does

Standard authenticator-app codes (TOTP) that work with Google Authenticator, 1Password, Authy, Microsoft Authenticator and others.

Why it matters

Your stats and API keys stay safe even if your password leaks.

How to use it

  1. Open Settings → Sign-in security and start setup.
  2. Scan the QR code with your authenticator app and enter the 6-digit code.
  3. Save your 10 recovery codes somewhere safe. Each works once.
  4. Next time you log in, enter the code from your app after your password.

How it works

Signing in with two-step verification1. Set up once: Settings → Sign-in security. Scan the QR code with an authenticator app, enter a code, save your 10 recovery codes. 2. Log in with your email and password. (otherwise: Wrong password: stop) 3. quietstats opens a 10-minute sign-in check and asks for your 6-digit code. 4. Enter the code from your app (it changes every 30 seconds) or one recovery code. Each works once. (otherwise: 5 wrong codes: start again) 5. You’re signed in.1Set up once: Settings →Sign-in security. Scan the QRcode with an authenticatorapp, enter a code, save your10 recovery codes.2Log in with your email andpassword.Wrong password:stop3quietstats opens a 10-minutesign-in check and asks foryour 6-digit code.4Enter the code from your app(it changes every 30 seconds)or one recovery code. Eachworks once.5 wrong codes:start again5You’re signed in.
From the two-step sign-in code. The authenticator secret is stored encrypted; recovery codes are stored only as hashes.

Privacy

Plans

Every plan, including Free. quietstats is free during launch: the Free plan covers 1 site and 5,000 pageviews a month, and no card is needed. See pricing.

Questions

I lost my phone. What now?

Log in with your password and one recovery code instead of the 6-digit code.

Can I sign in with Google or Microsoft?

Not yet. Those buttons stay hidden until they are switched on.

Related