Two-step sign-in and trusted devices

Turn on two-step sign-in with an authenticator app, save your backup codes, choose how often a browser asks for a code, and sign out lost devices.

Updated · 2 min read · 9 steps

Two-step sign-in adds a second check after the email link: a 6-digit code from an app on your phone. Mailpitcher needs it before you can send mail, run campaigns or connect a real mailbox.

Before you start

Install an authenticator app on your phone, if you don’t have one. Google Authenticator, 1Password and Authy all work.

Turn it on

Step 1: Open Settings, Security

Click your email address at the bottom left, then Settings, plan and usage, then Security.

Step 2: Click Turn on

Next to Two-step sign-in (marked Off), click Turn on. A code made of squares appears.

Step 3: Scan the code with your phone

Open your authenticator app, add an account, and point the camera at the code. Can’t scan? Type the key shown next to it into the app instead.

Step 4: Type the 6-digit code

Your app now shows a 6-digit code for Mailpitcher. Type it and click Turn on.

Settings, Security: turning on two-step sign-in.
  1. 1: Turn on
  2. 2: Scan the code with your authenticator app
  3. 3: Type the 6-digit code and click Turn on

Step 5: Save your backup codes

Mailpitcher shows a list of backup codes once. Click Download as a file or Copy and keep them somewhere safe, away from your phone. Each code signs you in once if you lose your phone. Then click I’ve saved them.

Backup codes appear once. Each one signs you in once if you lose your phone.
  1. 1: Download or copy them

Signing in from now on

Step 6: Enter the code when asked

After you click the email link, Mailpitcher asks Enter your code. Open your app and type the 6-digit code.

No phone? Click Lost your phone? Use a backup code.

When you sign in on a browser Mailpitcher doesn't remember, it asks for the code.
  1. 1: The 6-digit code from your app
  2. 2: No phone? Use a backup code

Trusted devices

Step 7: Choose how often to ask

Under Ask for a code, pick how often a browser you’ve used before asks again:

  • Every time I sign in
  • At most once a day, once a week (the default) or once a month
  • Only after a week away from this device, or a month away

Asking less often needs a current code to confirm.

Step 8: Forget a browser

Below, Remembered devices lists the browsers that skip the code. Click Forget next to one, or Forget all. They’ll ask for a code next time.

Ask for a code, and the browsers that skip it.
  1. 1: How often a remembered browser asks again
  2. 2: Forget one browser, or all

Step 9: Sign out a lost laptop or phone

Under Where you’re signed in, click Sign out next to a device, or Sign out everywhere else. It needs a new email link to get back in.

Good to know

  • To turn it off, click Turn off… and enter a code. Sending and campaigns then stop working until you turn it on again.
  • “That code didn’t work”? Check the time on your phone is set automatically, and use the newest code.

Questions

Why does Mailpitcher need two-step sign-in?

Mailpitcher can read and send from your mailboxes. Two-step sign-in means someone who gets into your email still can't get into Mailpitcher. It is needed before you send mail, run campaigns or connect a real mailbox. Reading mail, drafts and the demo mailbox work without it.

I lost my phone. How do I sign in?

On the code screen, click Lost your phone? Use a backup code, and type one of the backup codes you saved. Each works once. Then turn two-step sign-in off and on again in Settings, Security, to link your new phone.