Use enrolled verification methods and recovery codes
Understand passkey/authenticator choices without bypassing security.
Last reviewed
- Who can use this
- Owner, Admin, Finance, Viewer within their assigned sites
On this page
Brightstone supports enrolled verification methods where offered by your account and browser. A passkey uses the device or password manager's secure authentication flow; it is not a code to paste into a chat.
Use a method you enrolled
Review your account's security controls and follow the supported passkey or authenticator setup prompts. Keep the device/password manager available until setup is confirmed. During sign-in, choose an offered enrolled method and complete its native prompt.
A canceled or timed-out device prompt does not confirm sign-in. Retry the intended method or use another method explicitly offered by the account. Do not register someone else's device as your own recovery method.
Recovery codes
Authenticator setup can provide recovery codes. Save them privately in a secure password manager or another safe place. New recovery codes replaces the current recovery set, so update your stored copy when using it.
Codes are private authentication material. Support and public product assistants should never ask you to paste them. Losing a device is different from forgetting a normal password; resetting a password does not promise to remove required two-factor checks. If none of your enrolled methods or recovery options work, use the verified support route. Extra workspace policy or sensitive-action verification may still apply after ordinary sign-in.
If these steps do not resolve your question, contact Brightstone support. Never include passwords, tokens or recovery codes.
Contact support →