Ways to sign in

  • Apple or Google, in the app and on the web. On the web, Google may offer one-tap sign-in.
  • Email: we send a six-digit code and a link in the same email. The code works once, for 10 minutes. The link works once, for 15 minutes.
  • A passkey, if you have added one: your fingerprint, face or screen lock, with no code to type. See Passkeys, two-step sign-in and recovery codes.

There are no passwords to forget. You can also add two-step sign-in, which asks for a second check after an email code, a link, Google or Apple.

Linking methods

If you sign in with a new method that has the same verified email as your account, we'll ask you to confirm, then link them. Apple's private relay addresses can only be linked while you're signed in. In the app, go to You, then Sign-in and security, and use How you sign in. On the website, go to Settings, then Security.

Changing your email

In the app, go to You, then Sign-in and security, and choose Change email. On the website, go to Settings, Profile and language, then Change email. We ask you to confirm it's you, then send a code to the new address.

We also email your old address, with a link that undoes the change for 7 days. Undoing it puts the old address back and signs out every device.

If your organisation requires single sign-on, or manages your account through its identity provider, ask its admin to change your email. If you can no longer get into your old email, contact us: once we've checked it's you, we can change it.

Removing Apple or Google

Choose Remove next to Apple or Google, in the app or under Settings, Security on the website. We ask you to confirm it's you and email you about the change. You can't remove the last way you sign in: add a passkey or another method first.

Sessions

You can be signed in on the app and the web at the same time. Settings, then Security on the website, or You, Sign-in and security and Where you're signed in in the app, lists every active session. Sign out any you don't recognise, or choose Sign out everywhere else.

The app is tied to one phone at a time: signing in on another phone signs the first one out.

Confirming it's you

Some actions ask you to sign in again, or for a code: changing a payout method, viewing or editing tax details, creating an API key and closing your account. With two-step sign-in on, they ask for your second step as well, and so do withdrawals. Changing your email and removing Apple or Google ask too. Your confirmation lasts 10 minutes.

If you can't get in

  • Check the email address for typos and look in spam for our email.
  • Email codes expire after 10 minutes; ask for a new one.
  • If you've lost your authenticator app and your recovery codes, see what to do.
  • If you've lost access to the email and the Apple or Google account, contact us from any address. We'll ask a few questions to confirm it's you.