To help protect your account, we track the devices you use to sign in. This adds an extra layer of security by requiring verification when you (or someone else) attempts to access your account from an unrecognized device.
For Administrators: If you need to set up shared devices (like kiosks or front desk iPads) that skip verification for all users, see Trusted Devices (Account-Wide).
How It Works
Your First Sign-In
When you first create your account or sign in for the first time, your device is automatically registered as a trusted device. No additional verification is required.
Signing In From a New Device
When you sign in from a device we don't recognize, you'll be asked to verify your identity:
- Choose your verification method - Receive a code via email, or via text message when your profile has a phone number and Receive Text Messages turned on
- Enter the 6-digit code - Check your email or text messages for the verification code
- Device is now trusted - Once verified, you won't need to verify this device again
The verification screen also offers Try Different Method to switch between email and text, and Not you? Sign out if a code screen appears for an account that isn't yours.
If you sign in with a password and have two-factor authentication set up, your authenticator code already proves it's you - new devices are trusted automatically and you'll never see the code screen.
What Triggers Verification?
A new verification is required when you sign in from a device Flow Forms genuinely doesn't recognize - a new computer, a new phone, a different browser. It tries not to bother you otherwise: clearing your cookies doesn't force a code as long as the browser still looks like your trusted one, and if you're down to no trusted devices at all, your next sign-in simply registers that device fresh.
Managing Your Devices
You can view and manage your trusted devices from your profile:
- Click your name at the top of the sidebar and choose Profile
- Open Advanced Options and choose Manage Devices
- You'll see a list of all your trusted devices, including:
- Device name (browser and operating system)
- Location (city and country)
- Last time the device was used
- Which device you're currently using
Removing a Device
If you no longer use a device or suspect unauthorized access:
- Find the device in your device list
- Click the trash icon next to it (the device you are currently on can't be removed)
- The device will need to verify again the next time it signs in
Removing a device doesn't end a session that is already signed in - it takes effect at the next sign-in. If you suspect someone else has access, change your password as well as removing the device.
With more than one device on the list, a Sign Out All Other Devices button clears every device except the one you are on, so all of them re-verify next time.
Security Tips
- Review your devices regularly - If you see a device you don't recognize, remove it immediately and change your password
- Sign out on shared computers - Always sign out when using a public or shared computer
- Keep your contact info updated - Ensure your email and phone number are current so you can receive verification codes
Frequently Asked Questions
Q: Why am I being asked to verify my device?
A: This happens when we detect a sign-in from a device we don't recognize - a new device, or a browser that no longer looks like the one that was trusted.
Q: I'm on my regular device but being asked to verify. Why?
A: This can happen if your browser updated in a way that changed how it identifies itself, or if your trusted device expired after 1 year.
Q: What if I don't receive the verification code?
A: Check your spam/junk folder for emails. For text messages, ensure your phone number is correct in your profile and Receive Text Messages is on. Resend Code becomes available 5 minutes after the last send. Each code is good for 1 hour, and three wrong entries invalidates it - request a fresh one.
Q: How long does a device stay trusted?
A: Trusted devices remain active for 1 year from the date they were verified. After that, you'll need to verify again.
Q: Can I see where my account has been accessed from?
A: Yes, the device manager shows the approximate location (city and country) for each trusted device.