Sign-in & security
Passkeys, two-factor with an authenticator app and new-device notifications.
Kasimir offers four ways to sign in: email and password, magic link, Google or Microsoft, and passkey. You can additionally set up two-factor authentication with an authenticator app.
Set up a passkey
A passkey replaces your password with your fingerprint, face recognition or device PIN. It is bound to kasimir.ai and therefore does not work on fake sites (phishing protection).
Open Account → Security.
Under “Passkeys”, click Add passkey and confirm with your device.
Optional: give the passkey a name via Rename, e.g. “Work laptop”.
From then on, use Sign in with passkey on the login page — no email address or password needed. A passkey always counts as strong authentication and satisfies your company’s two-factor requirement.
Two-factor with an authenticator app
Open Account → Security and click Add authenticator under “Two-factor (authenticator app)”.
Scan the QR code with an app such as Microsoft Authenticator, Google Authenticator or 1Password. Without a scanner you can type in the displayed key.
Enter the six-digit code from the app — it is confirmed automatically.
After that, Kasimir asks for a code after every sign-in – with password, with magic link and also with Google or Microsoft. You only get in without a code with a passkey, or if your company has set signing in with Google or Microsoft to count as satisfied. Instead of the code you can also confirm with passkey.
There are no recovery codes. Also set up a passkey so you are not locked out if you lose your phone. If you cannot get in at all, an admin of your company can reset your two-factor setup.
Required for owners: Anyone who runs a company as its owner must set up a second factor – an authenticator app or a passkey. Until 30 October 2026, Kasimir reminds you with a banner and once a day with a pop-up. After that, sign-in without a second factor only shows the setup.
Email notifications
New device: if someone signs in to your account from a device Kasimir does not know yet, you get an email. You can turn this off under Account → Notifications → New devices.
Sign-in factors: whenever a passkey or authenticator is added or removed, you always get an email — this notice cannot be turned off.
The new-device email shows the time, the device (browser and operating system), the IP address and the sign-in type. For a new device, your company’s audit log records only the shortened start of the IP address.
Automatic sign-out
For security reasons, a sign-in ends automatically: after 24 hours without use and at the latest 7 days after signing in. Just sign in again afterwards. This way a session on a shared, borrowed or lost device does not stay valid indefinitely.