Two-factor sign-in

Owners and admins must use two-factor sign-in, because they can see and change everything, including client details and the team. Instructors and front desk staff can turn it on for themselves in Your account.

You sign in with your email: we send a 6-digit code and a link, valid for 10 minutes and usable once. With two-factor on, you then type the 6-digit code from the authenticator app on your phone. Any authenticator app that shows standard 6-digit codes works.

1. After the emailed code, you see a QR code (owners and admins see it at their first sign-in). Scan it with your authenticator app, or type in the key shown under it.
2. Enter the 6-digit code the app shows, then Turn on two-factor.
3. Save your ten recovery codes: copy or download them and keep them somewhere safe, away from your phone. They are shown once.
4. Tick that you have saved them, and carry on.

Each recovery code works once, in place of the 6-digit code. After you use one, Your account shows how many are left. You can make a new set at any time from Your account; it asks for a code from your app first.

• Sign in with a recovery code, then set up two-factor again on your new phone from Your account.
• No recovery codes? Ask your studio’s owner to reset your two-factor from Team. You set it up again at your next sign-in.
• If you are the only owner and can’t sign in, email [email protected].

We email you whenever two-factor is turned on or off, reset, or new recovery codes are made, saying what changed, when and who did it. If it wasn’t you, tell your studio’s owner and us straight away. A reset or turning two-factor off signs you out of your other sessions too.

After 5 wrong codes in 15 minutes, sign-in waits a while before you can try again.