Authorize new device

Device authorization is a security measure that protects your Bit2Me account against unauthorized access, even if your password has been exposed. To do this, we ask you to verify by email each new device that attempts to connect to your user account.

TABLE OF CONTENTS

• What is new device authorization and how does it work?
• Why does Bit2Me use this security measure?
• How does this measure protect me against phishing?
• What do I do if Bit2Me shows an error when verifying my device?
• What is the validity of the authorization?
• What do I do if I receive an authorization email that I did not request?
• What do I do if I don't receive the authorization email?
• Can I see and manage my authorized devices?

What is new device authorization and how does it work?

When accessing your account, several checks are performed to verify access. First, you must enter your email and password. Second, depending on your settings, you will need to enter a 6-digit 2FA code or a 4-digit code received via SMS/email.

As an added layer of security, if you have not accessed from the device or IP you are using in the last 30 days, we will ask you to verify the device. To do this, you will receive an email at your registered email address with the subject "Authorize new connection".

If you recognize this access request, click on the I AUTHORIZE THIS CONNECTION button in the email. By doing so, you will be redirected to the Bit2Me homepage and the device will be authorized to access.

Why does Bit2Me use this security measure?

At Bit2Me, we seek to protect you as much as possible from any attempt of improper access to your account. Device authorization is one of several security measures we use, which include:

• Email and password.
• Second-step factors (2FA, email, phone).
• Behavioral analysis.
• New device authorization.

All this complies with the highest standards of our internal and external cybersecurity team to ensure the protection of your account.

How does this measure protect me against phishing?

Phishing is a technique in which an attacker creates a copy of a legitimate website (for example, Bit2Me's) to trick you and steal your credentials. If you fall into the trap and enter your email, password, and 2FA code on a fake website, the attacker obtains your data.

However, thanks to device authorization, the attacker will not be able to access your account. When they try to log in from their own device, our system will detect that it is an unrecognized connection and will send an authorization email to your email address. Without access to your inbox, they will not be able to complete the login.

What do I do if Bit2Me shows an error when verifying my device?

An authorization link is single-use and expires. If you try to log in and take a while to click the link in the email, it may have expired, and you will have to start the process over to receive a new email.

Each time you log in from an unauthorized device, a new link is generated that invalidates the previous one. To avoid errors, make sure to always use the last email received and do not request a new access if you are already waiting for an authorization email, as the emails could overlap.

What is the validity of the authorization?

The authorization has a dual validity that you should keep in mind:

• The authorization link: You have 10 minutes to click on the link you receive by email to validate the device.
• The authorized device: Once confirmed, the device remains authorized for 30 days.

What do I do if I receive an authorization email that I did not request?

If you receive an authorization email that you did not request, it means that someone knows your password and is trying to access your account. Don't worry, thanks to this security measure, they will not be able to access it.

What you should do is go immediately to https://account.bit2me.com, log in, and change your password. Afterwards, reflect on where you might have entered your credentials to prevent it from happening again.

What do I do if I don't receive the authorization email?

The email usually arrives almost instantly. If you do not receive it, check the following:

1. You are checking the correct email inbox.
2. The email has not been moved to the Spam or junk folder.
3. You have synced or refreshed your inbox to receive new emails.
4. Your internet connection is working correctly.
5. Your email provider's application or website is working without issues.

If after checking these points you still do not receive the email, please, contact our support team and a specialist will review your case in detail.

Can I see and manage my authorized devices?

Yes, you can check and remove the devices that have access to your account from the Security section, within your user profile, both on the web and in the app.