Enabling two-factor authentication
Email-code 2FA, trusted devices, and how to recover if you lose access.
3 min read
Two-factor authentication on Vintony uses email codes by default. Enable it from /dashboard/account; click Enable 2FA, follow the prompt.
After 2FA is on, every sign-in requires you to enter a 6-digit code we email after the password is verified. The code expires in 10 minutes.
Trust this device for 30 days: tick the box on the verification screen to skip the prompt on that browser for 30 days. The trusted-device cookie is HttpOnly, SameSite=Lax, and tied to a server-side row we can revoke.
If you lose access to your email: you can disable 2FA via an out-of-band identity verification with our support team. We require photo ID matching the registrant contact on the account, plus a copy of the most recent invoice. The process takes 1–3 business days.
Stronger options (TOTP, hardware keys, WebAuthn) are on the roadmap; current customers can vote on priority via support tickets.