Two-factor and passkeys, and what if I lose my phone

Two-factor (a code from an authenticator app) is set up in your account settings with your password. When you turn it on we show 10 backup codes once: save them somewhere safe. Each works once.

Passkeys let you sign in with your device's lock (fingerprint, face, PIN) and no password.

If you lose your phone: sign in with your password and one of the backup codes, then set up two-factor again on the new phone (you can also generate a new set of backup codes with your password). After 10 wrong codes in a row sign-in is paused for 15 minutes. A device you trust skips the code for 30 days.

If you have neither your phone nor backup codes, we cannot let you in by guessing: write to hello@domainspace.si from the address of the account and we will tell you what we can verify.

More on our site