Authorize new device

Device authorization is a security measure that protects your Bit2Me account from unauthorized access, even if your password has been exposed. To ensure this, we ask you to verify each new device attempting to connect to your user account via email.

Frequently asked questions about device authorization:

• What is new device authorization and how does it work?
• Why does Bit2Me use this security measure?
• How does this measure protect me from phishing?
• What do I do if Bit2Me shows an error when verifying my device?
• How long is the authorization valid?
• What do I do if I receive an authorization email I didn't request?
• What do I do if I don't receive the authorization email?
• Can I view and manage my authorized devices?

What is new device authorization and how does it work?

When accessing your account, several checks are performed to verify access. First, you must enter your email and password. Second, depending on your settings, you will need to enter a 6-digit 2FA code or a 4-digit code received via SMS/email.

As an added layer of security, if you haven't accessed your account from the device or IP you are currently using in the last 30 days, we will ask you to verify the device. To do this, you will receive an email to your registered email address with the subject "Authorize new connection".

If you recognize this access request, click on the button I AUTHORIZE THIS CONNECTION in the email. By doing so, you will be redirected to the Bit2Me homepage and the device will be authorized for access.

Why does Bit2Me use this security measure?

At Bit2Me, we aim to protect you as much as possible from any attempt of unauthorized access to your account. Device authorization is one of several security measures we use, which include:

• Email and password.
• Second-step factors (2FA, email, phone).
• Behavioral analysis.
• New device authorization.

All of this complies with the highest standards of our internal and external cybersecurity team to guarantee the protection of your account.

How does this measure protect me from phishing?

Phishing is a technique where an attacker creates a copy of a legitimate website (for example, Bit2Me's) to trick you into stealing your credentials. If you fall into the trap and enter your email, password, and 2FA code on a fake website, the attacker obtains your data. You will find all the information on how to detect phishing, how to prevent it, and how to act in the following article: Bit2Me Security Alert: How to Protect Yourself from Phishing and Scams

What do I do if Bit2Me shows an error when verifying my device?

An authorization link is for single use and expires. If you try to log in and take a while to click the link in the email, it might have expired, and you will need to restart the process to receive a new email.

Each time you log in from an unauthorized device, a new link is generated, invalidating the previous one. To avoid errors, always ensure you use the latest email received and do not request new access if you are already waiting for an authorization email, as emails might overlap.

How long is the authorization valid?

The authorization has a dual validity period you should consider:

• The authorization link: You have 10 minutes to click the link you receive via email to validate the device.
• The authorized device: Once confirmed, the device remains authorized for 30 days.

What do I do if I receive an authorization email I didn't request?

If you receive an authorization email you didn't request, it means someone knows your password and is trying to access your account. Don't worry, thanks to this security measure, they won't be able to access it.

What you should do is immediately go to https://account.bit2me.com, log in, and change your password. Afterwards, reflect on where you might have entered your credentials to prevent it from happening again.

What do I do if I don't receive the authorization email?

The email usually arrives almost instantly. If you don't receive it, check the following:

1. You are checking the correct email inbox.
2. The email has not been moved to the Spam or Junk folder.
3. You have synced or refreshed your inbox to receive new emails.
4. Your internet connection is working correctly.
5. Your email provider's application or website is working without issues.

If, after checking these points, you still haven't received the email, please contact our support team, and a specialist will review your case in detail.

Can I view and manage my authorized devices?

Yes, you can view and remove devices that have access to your account from the Security section within your user profile, both on the web and in the app.