Two-step verification is an additional security measure you can add to your Peerio account.
Two-step verification requires two pieces of identification in order to access an account. Traditionally one is a piece of information (e.g. an account key or password) and one is physical (e.g. a card or device). With Peerio, the first piece is your account key and the second piece is your mobile device.
When you have enabled two-step verification and attempt to sign in to Peerio for the first time in 30 days, or from a new device you will be asked to verify that the request is valid using an authenticator app on your mobile device. The app will display a six-digit code that changes every minute, to ensure that only you will have access to the code.
Peerio recommends using one of the following authenticator apps:
Authy: Encrypted backup and sync of your accounts across devices, remote device de-activation, PIN-locking, and a desktop app. Provides convenience and security in the event of a stolen or lost device. Not open source. Available for Android and iOS.
Even if your account key was somehow compromised, an intruder would not be able to access your account without your mobile device.