Signing In to Your Account

The Two Sign-In Screens

Kabora has no password for new accounts. The first screen asks for one thing, your email address, with any Google or Apple button Kabora offers below it, so you may see one, both, or neither. The proof comes on the next screen. Link or unlink Google or Apple under Sign-in & security.

The Verification Code

Kabora emails you a six-digit verification code. It lasts 10 minutes, and you have five tries before it stops working; a wrong code tells you how many remain. Requesting another code cancels the previous one, so always use the newest email. If nothing arrives, Send a new code is on the code screen. At sign-in, Kabora sends three codes an hour to one person on one network; past that, use the newest code in your inbox or ask again later.

The code always comes by email, never by text message.

Your Account's Sign-In Method

Every account has one sign-in method, and Kabora asks for it first: the verification code, a passkey, or an authenticator app. It is the verification code, unless you chose another under Account settings → Sign-in & security → Sign in with. Setting up a passkey or an authenticator app does not change it. You are only ever asked for one.

• A passkey: The screen reads Use your passkey, and your device prompts you immediately. Continue with your passkey prompts again. Email me a verification code instead, below it, serves a device that does not hold your passkey.
• An authenticator app: A small window asks for the app's code. Use a different way opens a short list. It offers your passkey if you have one, and Use your authenticator app to return to the box. It also offers Use a verification code, and Use a backup code, which changes the box to accept one.
• The verification code: The code screen also has Use a different way. It always offers the verification code and your password, plus your passkey or authenticator app if you set one up. Any account can turn on an authenticator app under Sign-in & security, in Two-step verification.

In the Kabora app, passkeys and authenticator apps work the same way, with Use a different way below the authenticator code.

Passkeys

Kabora offers to set up a passkey once, immediately after the code that creates your account, and not after later sign-ins or a Google or Apple sign-in. You can add one at any time under Account settings → Sign-in & security → Passkeys, on kabora.app or in the app. It is then one press away, and Kabora keeps asking for the same method first until you choose the key under Sign in with. You can remove a passkey on the same screen.

Sign-In Messages and What They Mean

• "That passkey could not be used here. Try another way in." The check failed, and Kabora does not say which part: possibly an expired request, an unreadable browser response, or the wrong site. Use a code.
• "That passkey is not registered here." Kabora does not recognize that passkey: it was created for another site, or has since been removed from your account. Use a code.
• "That request expired. Try again." The attempt took too long. Start it again.
• "This sign-in attempt expired." The second step's code was already used, or its few minutes have passed. Press Sign in again.
• "That passkey looks cloned. Sign in another way." Two devices answered for one passkey. Do not ignore this; sign in with a code.
• "That code did not match." An authenticator code is valid for about 30 seconds. Ten wrong codes in a day lock the authenticator until the time the message states. Use a different way still works.
• "That account's email address is not confirmed with the provider." Confirm the address with the provider, or continue with your email.
• "Too many attempts." The message states how long to wait, either a number of minutes or "less than a minute".
• "That code has expired. Ask for a new one." The 10 minutes have passed. Send a new code is on the same screen.
• "Ask for a new code." No code is waiting for that address: yours was used, or replaced by a newer one. Press Send a new code and use the latest email.

Signing In With a Password

Any account can have a password. Under Sign-in & security, press Create or Change beside Password. Creating one first requires the verification code or a passkey; changing one requires your current password. You can also remove a password there.

To use it, choose Use a different way on the code screen, then Use your password; it signs you in on the web and in the app. If you have no password yet, Use a verification code below the field returns you to the code.

Kabora refuses a new password that has appeared in a data breach on another website, because a breached password is among the first a stranger would try. The refusal reads "This password has appeared in a data breach on another website". Choose a different one. Kabora checks without sending your password anywhere.