How it works
Three steps, about twenty seconds.
Every sign-in follows the same path, whether it's your first visit or your fiftieth.
Enter your password
It's checked against a salted, slow hash. Your actual password is never stored anywhere.
Get a code by email
A six-digit code lands in your inbox within seconds. It expires after 10 minutes.
You're in
Type the code and a secure session keeps you signed in on that device for 30 days.
An email worth opening.
The code arrives in a clean, readable message with the time and device of the request, so a sign-in you didn't start stands out right away.