HarborKey Verify
Support
HarborKey Verify approves sign-ins to your organization on your phone. A sign-in in your browser sends a request to the app; you check the details and confirm with your face, fingerprint or screen lock.
Last updated
Add an account
- Sign in to your organization’s HarborKey page in a browser and open Security, or follow the setup prompt during sign-in.
- Choose HarborKey Verify. A QR code appears.
- In the app, tap Add account and scan the code.
- Check that the device code shown in the browser matches your phone, then confirm in the browser.
Setup codes work once and expire after 5 minutes. If yours expired, get a new one in the browser.
Move to a new phone
- Install HarborKey Verify on the new phone, tap Add account and choose “Moving from another phone?”.
- On the old phone, open Settings → Move to a new phone and confirm it’s you. A transfer code appears.
- Scan that code with the new phone.
- The new phone shows a pairing code: enter it on the old phone to finish.
Your accounts get new keys on the new phone and the old phone stops approving sign-ins. Keys are never copied between phones or included in backups.
Lost or replaced your phone without moving
Contact your organization’s administrator. They can remove the lost phone so it can no longer approve sign-ins and let you set up HarborKey Verify again. If you still have another sign-in method (a passkey, a security key or recovery codes), you can sign in and remove the old phone from Security yourself.
Questions
Sign-in requests don’t arrive
- Open HarborKey Verify: pending requests always show when the app is open, even without a notification.
- Allow notifications for HarborKey Verify in your phone’s settings.
- Android: set battery usage for HarborKey Verify to “Unrestricted” (Settings → Apps → HarborKey Verify → Battery) so notifications aren’t delayed. Some phones also have their own “auto-launch” or “sleeping apps” lists; leave HarborKey Verify off them.
- iPhone: check that Focus or Do Not Disturb allows HarborKey Verify.
- Check that the phone has an internet connection and the correct date and time (set automatically).
I got a request I didn’t start
Don’t approve it. Tap “Not you? Report it”. The sign-in is stopped and your organization is alerted. Change your password if you have one: someone may know it.
The number on my phone doesn’t match
Only enter the number shown in the browser you are signing in with. If you can’t see one, deny the request.
“Push sign-in paused”
After several denied requests, push requests for your account are paused for 30 minutes to stop repeated unwanted prompts. Use another method or try later.
Contact
For account access, contact your organization’s IT team or administrator first: they manage your HarborKey account. For problems with the app itself, email gplayers@gmail.com.