For a few sensitive changes, Orvoro asks you to confirm it's you again, even though you're already signed in. This protects your account if someone ever gets hold of a signed-in browser.
When you'll be asked
- Changing your password or sign-in email address
- Turning your authenticator app on or off, or adding or removing a passkey
- Creating new recovery codes, or turning off email sign-in codes
- Inviting team members, changing their roles or removing them
- Changing a domain's nameservers, owner contact or transfer lock, turning DNSSEC on or off, getting its transfer code, or deleting it
- Transferring your account or products to someone else, or merging accounts
Once you've confirmed, you won't be asked again for 5 minutes in the same browser.
How to confirm
You'll see a Confirm it's you window. Use whichever option you have:
- Passkey — use Face ID, Touch ID, Windows Hello or your security key.
- Authenticator app — enter the 6-digit code from your app.
- Recovery code — enter one of your recovery codes (each works once).
- Email code — if you haven't set up an authenticator app or passkey, we email you a 6-digit code. It expires in 10 minutes. You can request a new one after a minute.
Too many tries?
After 5 incorrect attempts in 15 minutes, protected changes are paused for 15 minutes to keep your account safe. Everything else keeps working. Wait, then try again.
Related: Set up two-factor authentication (2FA) · Add a passkey or security key