# Signing in and keeping your account secure

> How to sign in to Prevarro with an emailed code or a passkey, how your second factor works, and how to add a passkey, an authenticator app and recovery codes under Settings → Security.

*This article is being updated.*

Prevarro has no passwords, so there's nothing to reuse, phish or reset. You sign in with a code sent to your email address, or with a passkey if you've added one.

## Sign in with your email code

1. Go to the Prevarro sign-in page, enter your **Email** and choose **Continue**. If a security check appears below the form, complete it first.
2. On **Check your email**, enter the six-digit code from the email Prevarro sent you. It signs you in as soon as all six digits are in.
3. Or, instead of typing the code, select the link in the same email.

Open the link on the same device and browser where you asked for the code. If you open it somewhere else, Prevarro asks you to go back to that device, or to enter the code there instead. A link that has been used or has expired can't be used again. Choose **Request a new code** to get a fresh one.

If the email doesn't arrive, choose **Send again**. There's a short wait before you can resend. If it still doesn't come, check your spam folder. To start again with another address, choose **Use a different email**.

After you sign in with your code or the link, Prevarro may show **Sign in faster next time** on a device with a fingerprint, face or screen lock. Choose **Add a passkey** to add one there and then, or **Not now**. It stops asking once you've added a passkey or chosen **Not now** twice. Owners aren't shown it, since they're asked to add a second factor as described below.

## Sign in with a passkey

If you've added a passkey, choose **Sign in with a passkey** under **Continue** on the sign-in page, then confirm on your device. A passkey signs you in on its own, with no emailed code. Your browser may also offer your passkey when you select the **Email** field.

**Sign in with a passkey** only appears on devices that support passkeys. If the passkey doesn't work, sign in with your email code instead.

## Confirm it's you with your second factor

If you sign in with your email code and you've added a passkey or an authenticator app, Prevarro asks for it next, before it opens any page. On **Confirm it's you**:

- enter the code your authenticator app shows and choose **Verify**;
- or choose **Use a passkey** and confirm on your device. A passkey you added as a second factor in the past shows as **Use** followed by its name.

Once you're through, Prevarro opens the page you were going to. If you confirm in another tab, a tab still asking carries on by itself when you go back to it. Choose **Cancel** to sign out instead.

If you only have a passkey and this browser can't use passkeys, the step reads **Use a device that holds your passkey.** Sign in on that device, or choose **Use a recovery code**. If you no longer have your passkey or authenticator app, choose **Lost your device?** or see **Lost your device**.

## Add a second factor

Go to **Settings → Security**. The **How you sign in** card lists everything that protects your account. You can add either or both of these:

- **Passkeys** - choose **Add passkey**. In **Add a passkey**, give it a **Name** and choose **Continue**. Your device then asks you to confirm. You can then sign in with the passkey instead of an emailed code. **Add passkey** only appears on devices that support passkeys.
- **Authenticator app (TOTP)** - choose **Set up**. In **Set up your authenticator app**, scan the QR code with your authenticator app (or type in the **Setup key**), then enter the code the app shows and choose **Verify**.

Once you have a second factor, Prevarro asks you to **Confirm it's you** when you sign in with your email code. The same step can appear again before a sensitive change, such as adding or removing a factor or changing billing. To confirm, you enter your authenticator code or use your passkey.

## When a second factor is required

Three things can make a second factor required rather than optional:

- **You're an owner.** Owners hold a passkey or an authenticator app on top of the emailed code. Prevarro asks you to add one. A short grace period starts the first time you take a money action, or once your business's trial has ended, and from then the ask shows the date it becomes required.
- **Your business requires it.** An owner can turn on **Require two-factor for all users** in the **Security policy** card under **Settings → General**. Everyone without a second factor gets a grace period, and the card shows the date it's required from. Anyone who accepts an invitation afterwards adds one as they join.
- **You take a payment action.** Payment actions need a passkey or an authenticator app, whatever your role. If you don't have one, Prevarro asks you to **Add a second factor to continue**, and the action carries on once you've added one. Choose **Not now** to leave it.

Until the date, a card at the top of the page asks you to add one: choose **Add a passkey** or **Use an authenticator app**, or **Not now** to hide the card for now. If you're an owner, **Not now** hides it on all your devices, until the date once the card shows one, or for seven days before that. If it's your business's requirement, **Not now** hides it in that browser tab only, so it comes back in a new tab or the next time you sign in. After the date, **Add a second factor to continue** is the only page you'll see until you've added one. Choose **Sign out** to leave it for now.

## Recovery codes

When you add your first second factor, Prevarro shows **Your recovery codes**. They're shown only once, so choose **Copy all** or **Download** and keep them somewhere safe. Choose **I've saved them** when you're done.

The **Recovery codes** row shows how many you have left and when they were issued. Choose **Regenerate** to get a new set. Your old codes stop working when you do. If you have a second factor but no codes yet, the row reads **None issued** and the button is **Generate**.

## Change your sign-in email

1. On the **Email code** row, choose **Change email**.
2. Enter your **New email** and choose **Send codes**. Prevarro sends a code to your current address and another to the new one.
3. Enter both codes and choose **Confirm**.

## Your sessions

The **Active sessions** card shows everywhere you're signed in. Choose **Sign out** beside a session to end it, or **Sign out everywhere else**, then **Sign out** to confirm, to end every session except the one you're using.

To sign out of the session you're using, open the account menu at the top right and choose **Log out**.