Sign-in security: authenticator apps and passkeys

Three ways to verify it's really you — pick what fits, with email as your built-in recovery.

1. 1Passkeys (recommended): in the portal go to Settings → Sign-in & security → Add passkey. Approve with Face ID, fingerprint, or your device PIN. From then on, enter your email on the sign-in page and tap 'Sign in with a passkey' — no password, no codes, and phishing-resistant by design.
2. 2Authenticator app: Settings → Sign-in & security → Authenticator app → Set up. Scan the QR code with Google Authenticator, Microsoft Authenticator, Authy, or 1Password and confirm with the 6-digit code. Sign-ins then ask for your password plus the current code.
3. 3Email codes: nothing to set up — if you sign in with your password and don't have an authenticator app configured, we email a one-time code to your verified address automatically. If you have both methods, you'll be offered a choice.
4. 4Recovery: forgot your password? Use 'Forgot password' on the sign-in page — a reset code goes to your verified email.
5. 5Lost access to everything (new phone, no passkey device)? Email info@cybermatic.ai from your account email; we'll verify your identity and reset your sign-in methods so you can re-enroll.

Tip: Set up a passkey AND keep email access healthy — the passkey for everyday speed, your inbox as the safety net. We don't use SMS codes: they're vulnerable to SIM-swap attacks, which is exactly what our own scanners flag.