Security

Settings → Security controls who can get into your account. It has two parts: a Sign-in card with your password and two-factor authentication, and a list of logged-in devices.

Password

You don’t type a new password on this page. Press the Password row, then Send link. Milkcrate emails a reset link to the address on your account. Open it and choose a new password. Changing your password logs out your other devices.

Two-factor authentication

Two-factor uses an authenticator app on your phone. Press the Two-factor authentication row and follow the steps.

1. Give the authenticator a name, or keep the suggested one, such as “Authenticator 1”. Press Continue.
2. Scan the code with your authenticator app. You can type the key in by hand instead. Then press I’ve added it.
3. Type the six-digit code your app shows.

From then on, logging in asks for a code from the app after your password. The row shows On once one is set up. You can add more than one authenticator, for example a second phone.

To remove an authenticator, open the row and press Remove, then confirm. If you haven’t entered a code in the last minute, Milkcrate asks for a fresh one from that authenticator first. After you remove the last one, your password alone gets you in again.

Remove is greyed out while your account is scheduled for deletion. Cancel the deletion first.

If you lose your phone and can’t get a code, the code screen at log-in has a “Lost your authenticator?” link. It opens an email to support@milkcrate.site.

Logged-in devices

This card lists every device with an active session. Each row shows the browser and system, such as “Chrome on macOS”, and the start of the device’s IP address. Other devices also show when they were last active. Your current device is marked This device.

Press Log out beside any other device and it has to log in again. When other devices are listed, Log out all ends every session except the one you’re using.