Security

Two-Factor Authentication

Two-factor authentication is an extra layer of security that adds another step to the login process, making it more difficult for unauthorized users to access your account. This is achieved using an authentication app such as 1Password, LastPass, or Google Authenticator.

To enable two-factor authentication for your Hubble Studio account, follow these steps:

1. Open your profile picture in the top right corner of the Hubble Studio dashboard
2. Select "My Profile" from the dropdown menu
3. Click on the "Security" tab
4. Scroll down to the "Two Factor Authentication" section and click on "Enable two-factor authentication"
5. Follow the prompts to set up your 2FA and generate your first code
6. Verify the code by clicking the "Verify code" button

Once you have enabled two-factor authentication, you will be required to enter a code from your chosen 2FA app each time you log in to Hubble Studio. This provides an additional layer of security to protect your account from unauthorized access.

Passkeys

Passkeys let you sign in with your fingerprint, face or device PIN instead of your password. They are stored on your devices or in your password manager, like 1Password, iCloud Keychain or Google Password Manager, and only work on Hubble Studio, so they can not be phished.

Creating a passkey

1. Open your profile picture in the top right corner of the Hubble Studio dashboard
2. Select "My Profile" from the dropdown menu
3. Click on the "Security" tab, you may be asked to confirm your access first
4. Scroll down to the "Passkeys" section and click on "Create a passkey"
5. Follow the prompts of your browser or password manager to create the passkey

The passkey is named after the password manager it is stored in, or after the browser and operating system you created it with. You can give it a name of your own with the "Rename" button, using up to 50 characters. Leaving the name empty names it automatically again.

Each passkey shows whether it is Synced between your devices, like passkeys in iCloud Keychain or a password manager, or bound to This device only, like a hardware security key.

Signing in with a passkey

On the login page, click on "Sign in with a passkey" and confirm with your fingerprint, face or device PIN. Many browsers also offer your passkeys directly in the suggestions of the email field.

As a passkey already combines something you have, your device, with something you are or know, your fingerprint, face or PIN, you are not asked for a two-factor code when signing in with a passkey.

You can also use a passkey instead of your password when Hubble Studio asks you to confirm your access before sensitive actions.

Being asked to add a passkey

If you don't have a passkey yet, Hubble Studio offers to create one right after you signed in or verified your email address. You choose one of these options before you continue:

• Create a passkey creates a passkey right away.
• Skip for now asks you again when you sign in after 14 days.
• Don't ask again stops asking you. You can still create passkeys in your security settings at any time.

Removing a passkey

1. Open the "Security" tab of your profile
2. Find the passkey in the "Passkeys" section and click on "Delete"
3. Confirm that you want to delete the passkey

The passkey can no longer be used to sign in. Some browsers and password managers also hide it automatically afterwards, otherwise you can remove it there yourself.

We send you an email whenever a passkey is added to, renamed on or removed from your account, so you notice if someone else changed your passkeys.