Two-factor authentication, passkeys and recovery codes

This guide is for everyone with a VYNLT account. Two-factor authentication means a stolen password isn't enough to get into your music. Some organizations and some share links require it.

You can use an authenticator app (such as 1Password, Authy or Google Authenticator), a passkey (Face ID, Touch ID, Windows Hello or a hardware security key), or both.

Turn on an authenticator app

1. Open Settings → Security.
2. Under Authenticator app, choose Set up.
3. Scan the QR code with your authenticator app. If you can't scan it, copy the key shown and enter it in the app by hand.
4. Type the 6-digit code from the app into Enter the 6-digit code and choose Verify & turn on.
5. Your recovery codes appear. Copy or save them somewhere safe, then choose Done. They won't be shown again.

Add a passkey

1. Open Settings → Security.
2. Under Passkeys & security keys, choose Add passkey.
3. Give it a name you will recognise (for example "MacBook Touch ID") and follow your device's prompt.

Passkeys are the most secure option, and you can sign in with them without a password. You can rename or remove a passkey from the same list.

Recovery codes

Each recovery code signs you in once if you can't use your authenticator app or passkeys. On the sign-in screen, choose Use a recovery code and type one in.

To get a fresh set, open Settings → Security → Recovery codes and choose Regenerate. Your old codes stop working straight away.

What you'll see

• When two-factor is on, Authenticator app shows On.
• The Review your security card on the same page checks your setup step by step. Choose Start review.
• On a share link or Focus Session that needs two-factor, you are taken to set it up and then straight back to the music.

Common problems

• The code is always wrong. Check that your phone's clock is set automatically. Codes change every 30 seconds.
• "This browser doesn't support passkeys." Use a current version of Safari, Chrome, Edge or Firefox, or use an authenticator app instead.
• Lost your phone and your recovery codes. If you belong to an organization, ask one of its admins to choose Reset two-factor for you in its member list. You get an email; confirm with your password and set up two-factor again. Otherwise email hello@vynlt.com from the address on your account.
• "Your organization requires two-factor authentication." An organization you belong to has made it compulsory. Set up an authenticator app or a passkey to keep access.