Basic Security: Password and Email Verification

By default, every Trimble ID is protected by your password and a one-time password (OTP) sent to your primary email address. This method serves as the basic protection for your account.

One-time passwords ensure that even if someone learns your password, they cannot access your account from a new device unless they also have access to your email.

When is the code sent?

Trimble will send an OTP to your primary email address each time you sign in from a new or unrecognized device and have no other sign-in methods configured on your account.

For additional explanation, see Why am I being asked for a verification code to sign in?.

Advanced Security: Stronger Sign-in Methods are also More Convenient

These methods provide stronger protection than the basic email verification.

For greater security and convenience, we strongly recommend adding one or more of the following sign-in methods to your account. A link to step-by-step instructions follows.

Passkeys

Passkeys are the new standard for account security, replacing passwords with a more secure and convenient sign-in method. A passkey is a unique digital key stored securely on your device, whether that is a phone, computer, or hardware key.

• How it works: Instead of typing a password to sign in, you use your device's built-in authentication - such as facial recognition, fingerprint, or PIN.
• Why it's the best option: Passkeys are designed to be phishing-resistant. They are the strongest security option available for your account.

For more detailed information, please see Passkeys FAQ.

Authenticator App

An authenticator app (like Google Authenticator or Microsoft Authenticator) generates a time-sensitive, 6-digit code on your device.

• How it works: After entering your password, you are prompted to retrieve the 6-digit code displayed in the app on your trusted device and use it to complete the sign-in.
• Why it's a good option: The code is generated on a physical device you own and changes every 30-60 seconds.

Either one of these is more secure and more convenient than responding to a one-time password each time. To set up one or more of these stronger methods, see Set Up Your Trimble ID MFA Methods.

Secondary Email

You can add a secondary email address to your account as another way to receive a verification code.

Important: For your security, this must be a different email address from the primary email associated with your Trimble ID.

Ensuring You Can Always Access Your Account

Setting up strong sign-in methods is the first step. The next step is ensuring you have a backup plan in case you lose access to your primary device.

Trusted Devices

When you sign in using a verification code, you will see an option to "Remember this device." Trusting a device you use regularly (like your personal laptop or phone) allows you to sign in for the next 30 days without needing to enter a second verification step.

Important: You should never trust a shared or public computer.

To view and manage your list of trusted devices at any time, go to myprofile.trimble.com.

Recovery Codes

Once you add your first security method (like a passkey or authenticator app), Trimble will automatically generate a set of 10 single-use recovery codes.

Purpose: Recovery codes are your "emergency key." If you lose access to all of your devices and sign-in methods, you can use one of these codes to get back into your account.

CAUTION: You must store these codes in a very safe and secure place that you can access even if you lose your primary devices. For example, you could print them and store them in a safe, or save them in a secure digital vault that you can access without your primary device.