Signing In and Recovering Access

The First Screen

Choose Sign in / Sign up. The first screen asks one thing: your email address. Continue is under it, with any Google or Apple button below that. Everything that proves your identity comes on the next screen.

One Sign-In Method

Each account signs in one way, and Kabora asks for that one:

• A verification code: Six digits, valid for 10 minutes. Every account has it.
• A passkey: Your device's face, fingerprint or screen lock proves your identity. Nothing is typed, so nothing can be read over your shoulder or copied from a leak.
• An authenticator app: You type the six-digit code the app shows into a small window of its own.

Kabora emails you a verification code unless you choose another method, and any passkey or authenticator app you set up is one press away. Setting one up does not change what Kabora asks for first. To change it, open Account settings → Sign-in & security, or Settings → Security → Sign in in a host's dashboard. Press Use this beside another method under Sign in with. One proof completes the sign-in, and you are never asked for two.

Reaching the Verification Code

Whichever method your account uses, the verification code is one press away:

• On the passkey screen: Press Email me a verification code instead.
• In the authenticator window: Press Use a different way, then Use a verification code.
• On the code screen: Use a different way always offers the verification code and your password, and your passkey or authenticator app if you set one up.

The Kabora app offers the same. Use a different way under its code box opens your passkey or your authenticator app, provided you set one up. A passkey is offered only on a phone that can use one. It also offers Email me a new verification code and your password. Any account can add a passkey or turn on an authenticator app, under Sign-in & security.

The correct password signs you in, on the web and in the app, from any browser or phone.

Adding a Passkey

Kabora offers a passkey once, immediately after the code that creates a new account; never on later sign-ins, or after Google or Apple. After that, use Sign-in & security → Passkeys → Add a passkey, on kabora.app or in the Kabora app. Your device asks once. The new key is then one press away, and Kabora keeps asking for the same method first until you choose the key under Sign in with.

Add one on your phone as well as your laptop. With two keys, losing one is an inconvenience rather than a lockout.

Renaming and Removing Passkeys

Rename and remove passkeys on the same screen. Removing one requires confirmation with a passkey you still have. This protects your account: somebody who gets into your email cannot swap your passkeys.

If you lose a device, press Lost the device one of these is on? on that screen, and Kabora emails you a verification code. Entering it removes your passkeys and returns the account to verification codes.

In the Kabora App

The app asks for your passkey the same way, and falls back to a verification code when the key is not on the phone. An authenticator account types the app's code, or a backup code, with Email me a verification code instead under it.

When a Passkey Is Refused

Picking the wrong key is common, because most people have several and browsers offer them all:

• "That passkey could not be used here." The check failed, often because the key that answered was not your Kabora one. Press the button again and choose the Kabora one, or use a verification code.
• "That passkey is not registered here." The key is real, but this account has never registered it, or it has since been removed. Sign in with a verification code, then add it under Sign-in & security.
• "That request expired." You took longer than a few minutes, or the prompt was already used. Press the button again.
• "This sign-in attempt expired." The second step's code was already used, or its few minutes are over. Press Sign in again to be asked once more.
• "That passkey looks cloned." Two things answered for one key. Do not ignore this message. Sign in with a verification code instead, remove that passkey under Sign-in & security, and add a fresh one.

If a sign-in never finishes, with the button stuck on "One moment…", reload the page and use a verification code. Then tell Kabora, because that is a fault on Kabora's side.

When the Prompt Appears and Nothing Happens

Sometimes the system window opens and then sits idle, most often on a machine that does not hold your key, or in Safari. Close it and press Email me a verification code instead, which exists for this case as well as for a lost device. Once you are in, add a passkey for the machine you are on, so it does not happen there again.

Authenticator Codes

Codes change every 30 seconds. Ten wrong codes in a day stop the authenticator for that account until the time the message names. A correct code never counts against you. Without your phone, enter a backup code in the same box.

If You Cannot Sign In at All

Email support@kabora.app from the address on the account. Kabora staff cannot see or reset your passkeys or your authenticator for you, so nobody can talk their way past them on your behalf.