Signing in and keeping your account secure

How to sign in to Prevarro with an emailed code or a passkey, how your second factor works, and how to add a passkey, an authenticator app and recovery codes under Settings → Security.

This article is being updated.

Prevarro has no passwords, so there's nothing to reuse, phish or reset. You sign in with a code sent to your email address, or with a passkey if you've added one.

Sign in with your email code

1. Go to the Prevarro sign-in page, enter your Email and choose Continue. If a security check appears below the form, complete it first.
2. On Check your email, enter the six-digit code from the email Prevarro sent you. It signs you in as soon as all six digits are in.
3. Or, instead of typing the code, select the link in the same email.

Open the link on the same device and browser where you asked for the code. If you open it somewhere else, Prevarro asks you to go back to that device, or to enter the code there instead. A link that has been used or has expired can't be used again. Choose Request a new code to get a fresh one.

If the email doesn't arrive, choose Send again. There's a short wait before you can resend. If it still doesn't come, check your spam folder. To start again with another address, choose Use a different email.

After you sign in with your code or the link, Prevarro may show Sign in faster next time on a device with a fingerprint, face or screen lock. Choose Add a passkey to add one there and then, or Not now. It stops asking once you've added a passkey or chosen Not now twice. Owners aren't shown it, since they're asked to add a second factor as described below.

Sign in with a passkey

If you've added a passkey, choose Sign in with a passkey under Continue on the sign-in page, then confirm on your device. A passkey signs you in on its own, with no emailed code. Your browser may also offer your passkey when you select the Email field.

Sign in with a passkey only appears on devices that support passkeys. If the passkey doesn't work, sign in with your email code instead.

Confirm it's you with your second factor

If you sign in with your email code and you've added a passkey or an authenticator app, Prevarro asks for it next, before it opens any page. On Confirm it's you:

• enter the code your authenticator app shows and choose Verify;
• or choose Use a passkey and confirm on your device. A passkey you added as a second factor in the past shows as Use followed by its name.

Once you're through, Prevarro opens the page you were going to. If you confirm in another tab, a tab still asking carries on by itself when you go back to it. Choose Cancel to sign out instead.

If you only have a passkey and this browser can't use passkeys, the step reads Use a device that holds your passkey. Sign in on that device, or choose Use a recovery code. If you no longer have your passkey or authenticator app, choose Lost your device? or see Lost your device.

Add a second factor

Go to Settings → Security. The How you sign in card lists everything that protects your account. You can add either or both of these:

• Passkeys - choose Add passkey. In Add a passkey, give it a Name and choose Continue. Your device then asks you to confirm. You can then sign in with the passkey instead of an emailed code. Add passkey only appears on devices that support passkeys.
• Authenticator app (TOTP) - choose Set up. In Set up your authenticator app, scan the QR code with your authenticator app (or type in the Setup key), then enter the code the app shows and choose Verify.

Once you have a second factor, Prevarro asks you to Confirm it's you when you sign in with your email code. The same step can appear again before a sensitive change, such as adding or removing a factor or changing billing. To confirm, you enter your authenticator code or use your passkey.

When a second factor is required

Three things can make a second factor required rather than optional:

• You're an owner. Owners hold a passkey or an authenticator app on top of the emailed code. Prevarro asks you to add one. A short grace period starts the first time you take a money action, or once your business's trial has ended, and from then the ask shows the date it becomes required.
• Your business requires it. An owner can turn on Require two-factor for all users in the Security policy card under Settings → General. Everyone without a second factor gets a grace period, and the card shows the date it's required from. Anyone who accepts an invitation afterwards adds one as they join.
• You take a payment action. Payment actions need a passkey or an authenticator app, whatever your role. If you don't have one, Prevarro asks you to Add a second factor to continue, and the action carries on once you've added one. Choose Not now to leave it.

Until the date, a card at the top of the page asks you to add one: choose Add a passkey or Use an authenticator app, or Not now to hide the card for now. If you're an owner, Not now hides it on all your devices, until the date once the card shows one, or for seven days before that. If it's your business's requirement, Not now hides it in that browser tab only, so it comes back in a new tab or the next time you sign in. After the date, Add a second factor to continue is the only page you'll see until you've added one. Choose Sign out to leave it for now.

Recovery codes

When you add your first second factor, Prevarro shows Your recovery codes. They're shown only once, so choose Copy all or Download and keep them somewhere safe. Choose I've saved them when you're done.

The Recovery codes row shows how many you have left and when they were issued. Choose Regenerate to get a new set. Your old codes stop working when you do. If you have a second factor but no codes yet, the row reads None issued and the button is Generate.

Change your sign-in email

1. On the Email code row, choose Change email.
2. Enter your New email and choose Send codes. Prevarro sends a code to your current address and another to the new one.
3. Enter both codes and choose Confirm.

Your sessions

The Active sessions card shows everywhere you're signed in. Choose Sign out beside a session to end it, or Sign out everywhere else, then Sign out to confirm, to end every session except the one you're using.

To sign out of the session you're using, open the account menu at the top right and choose Log out.