Signing in
Passkeys, two-step sign-in and what to do if you lose access.
Everything here is in Security. It asks for your password first, as it can change how you sign in.
Sign in with a passkey
A passkey lets you sign in with your fingerprint, face or device PIN instead of your password. It is saved on your device, your phone or a security key, and only works on this site, so it can't be phished or reused elsewhere.
To add one, go to Passkeys, name it after the device and choose Add a passkey. Your browser or phone does the rest. Add one on each device you use, or one on your phone to use from any computer nearby.
Then choose Sign in with a passkey on the sign-in page. Your browser may also offer it straight from the email box. A passkey proves both who you are and that you have your device, so it never asks for a second step.
Turn on two-step sign-in
With two-step sign-in, a password alone isn't enough: after it, we ask for one more thing. Turn on either or both of these:
- Authenticator app. Scan the code with an app such as 1Password, Google Authenticator or Authy, then enter the six-digit code it shows. We also give you recovery codes: keep them in a password manager.
- Codes by email. We email you a six-digit code each time you sign in with your password. We send one to confirm your address first. It is only as safe as your mailbox, so an authenticator app or a passkey is better if you can.
Once two-step sign-in is on, your passkeys work as the second step too.
Admin accounts must use a passkey or two-step sign-in to open the admin pages.
Lost access
Lost your phone with the authenticator app. Use one of your recovery codes on the second step page: choose Recovery. Each one works once. Once in, set the app up again and make new codes.
No recovery codes left. If you have a passkey or codes by email, use one of those instead. Otherwise, get in touch with your account's email address and we'll check it's you before turning two-step sign-in off.
Forgotten your password. Choose Forgot password? on the sign-in page. If two-step sign-in is on, you'll still need your second step afterwards.