Account Security

How we help you protect your Notify.domains account and what to do if you need help.

Sign-in security

Your account can be secured with stronger sign-in options so it's harder for anyone else to access it.

  • Passkeys — Sign in with your device or a security key instead of a password. A passkey uses a key stored on your device (and can be synced via iCloud, Google Password Manager, or 1Password); you confirm with your face, fingerprint, or device PIN. Passkeys are resistant to phishing and don't get leaked like passwords. You can register multiple passkeys (e.g. phone and laptop) and use any of them to sign in.
  • Two-factor authentication (2FA) — Add a second step after your password: a code from an authenticator app (e.g. Google Authenticator, Authy) or a one-time backup code. Even if someone learns your password, they can't sign in without the code. If your passkey isn't available, you can still sign in with your password and 2FA.

How to turn it on

From your account:

  • Passkeys — Go to your Profile and use the Passkeys section to add a passkey (you'll sign in with your password first). On the sign-in page, choose "Log in with passkey" and confirm with your face, fingerprint, or device PIN. You can add, rename, or remove passkeys in Profile; if you remove one from your account, you may need to delete it from your browser or password manager to stop it appearing as an option.
  • 2FA — In your Profile, open the Two-factor authentication section and follow the steps to enable it. You'll scan a QR code with your authenticator app and receive backup codes. Store the backup codes somewhere safe; you'll need one if you lose access to your app.

If you lose access

If you can't sign in (e.g. you lost your phone or backup codes):

  • Use a backup code if you have one — each code works once. After signing in, you can regenerate new backup codes in Profile.
  • If you have another passkey on a different device, use it to sign in, then add or remove passkeys as needed.
  • If you're still locked out, contact us. We can help you regain access to your account so you can set up sign-in options again.

We take it seriously

We treat account security as a priority and work to keep your data and sign-in options protected. If you see something that doesn't look right or have a security concern, please get in touch.