Confirm it's you

Some changes are too important to make just because a browser is signed in. Before them, Shorter Loop asks you to prove it's really you. This is called Confirm it's you.

Without this check, someone who found your laptop unlocked could turn off your two-factor authentication or read your recovery codes.

Confirm it's you: enter your password, or confirm another way

When you are asked

Where	Action
My profile → Two-factor authentication	Set up or change your authenticator app
	Add a passkey or a security key
	Remove a method
	Show your recovery codes
	Make new recovery codes
	Turn off two-factor authentication
My profile → Sessions	Sign out of all other sessions
Settings → Security → Sign-in security (admins)	Change a setting
	Reset a member's two-factor authentication

Once you have confirmed, you aren't asked again for a while: 2 hours by default. Your company admin can set this from 15 minutes to 8 hours. See Company sign-in security settings.

Right after you sign in, you often don't need to confirm. These sign-ins already count:

your password;

your authenticator app;

a passkey or security key;

a recovery code.

These don't count:

company single sign-on;

Google or LinkedIn without two-factor authentication;

a code or link sent to your email;

an invitation.

The first protected change after one of those asks you to confirm.

Ways to confirm

The dialog opens with the best method you have. Or confirm another way lists the rest:

Option	What you do
Use your password	Type your Shorter Loop password. Only shown if your account has a password.
Use your authenticator app	Type the current 6-digit code.
Use a security key or passkey	Click Use security key and follow your browser.
Use a recovery code	Type an unused recovery code. It is then used up.
Get a code by email	Click Send code, then type the 6-digit code from the email.

Get a code by email: Send code, then enter the code

After you confirm, the change you asked for carries on by itself. You don't need to click it again.

If it doesn't work

That password is not correct. Try again, or confirm another way.

What you see	What to do
That password is not correct. Try again, or confirm another way.	Retype it, or pick another way below.
That code did not work. Check the time on your phone and try again.	Wait for the next code from your app.
That code did not work. Check the latest email from us and try again.	Use the code from the newest email. Each new email replaces the code before it.
Too many wrong codes. Wait 15 minutes and try again.	Code checks are paused for 15 minutes after 10 wrong codes.
Sign in again to change security settings.	You signed in before this feature existed. Sign out, sign in again, and repeat the change.

Cancel closes the dialog, and the change is not made. Nothing else happens.

Manage your two-factor methods

Your sessions

When you are asked#

Ways to confirm#

If it doesn't work#

Related#

When you are asked

Ways to confirm

If it doesn't work

Related