Trusted devices for 30 days

When you enter your two-factor code you can tick "trust this device". On that browser you will not be asked for a code again for 30 days, while everyone else still is.

Trust is stored in the browser and tied to your user and to the exact authentication factor you enrolled. If you delete your two-factor setup and enrol again, or somebody removes the connection, every previously trusted browser is invalidated and the code is requested again. Clearing your browser data has the same effect.

Only trust devices that are yours and locked with a password or biometrics; never do it on a shared or public computer.

When to use it

Tick the trust option only on a device that is yours alone: your work laptop or your own phone. Never on a shared computer, a client machine or a browser in a hotel or a coworking space.

How it behaves

• The device is remembered for 30 days and then asks for a code again.
• Trust is per browser and per profile, so the same laptop asks again in a different browser or in a private window.
• Clearing cookies removes the trust immediately.

Good to know

If a device is lost or stolen, change your password: that ends the existing sessions and the trusted state along with them. Trust never replaces the second factor for a new sign-in from an unknown device, so an attacker with only your password still cannot get in.