Sign-in and security

Three ways to sign in

A LatchPay account is your own. On the sign-in page you can use:

• Email and password. A new account exists only after you open the link we mail you, enter the password you chose and press Confirm and create account. The password needs at least 12 characters.
• Continue with Google. Google confirms who you are; LatchPay gets your name, email and a Google user id, never your Google password.
• Continue with Whop. The same as before. Whop is also how LatchPay lists your Whop businesses and installs the app, so you connect it during setup even when you sign in with email or Google.

Settings › Sign-in and security (also in the user menu) lists the methods of your account. You can connect Google or Whop there, and remove Google or the password as long as another way to sign in remains. Whop cannot be removed: it also carries your business connection and your affiliate payouts.

An account that signed in with Whop before

Nothing changes for an account that was created with Whop: Continue with Whop opens the same stores, fees and settings. When you later continue with Google using the same email address, LatchPay links Google to that account, but only when both Google and Whop have confirmed the address. Otherwise the sign-in page asks you to continue with Whop once and connect Google in Settings.

To add a password to such an account, choose Forgot password? with the email your account uses: we mail a link to set one. It works for 30 minutes and only once.

Passwords and a forgotten password

1. 1

   Forgot password?

   Enter the email you sign in with. The page gives the same answer for every address; if an account uses it, the mail arrives within a minute or two. Check spam when it does not.

2. 2

   Choose a new password

   The link works for 30 minutes and only once. Saving signs out every other browser and device, and you sign in again with the new password.

Two-step sign-in

Two-step sign-in is optional. Turn it on in Sign-in and security: scan the QR code with an authenticator app (1Password, Google Authenticator, Authy, iCloud Passwords), enter the 6-digit code it shows, and save the ten recovery codes. From then on every sign-in asks for a code, whether you use a password, Google or Whop.

• Each recovery code works once. New recovery codes replace all old ones and need a current code.
• Turning two-step sign-in off needs a code or a recovery code.
• A code that does not work usually means the phone's clock is off; set it to automatic time.

A lost phone

Sign in with a recovery code instead of the app code (Use a recovery code instead). Lost the phone and the codes? Contact support. We check that it is you before switching two-step sign-in off; there is no way around that on your own.

Sessions and signing out

A sign-in lasts seven days in this browser. Sign out everywhere else, in Sign-in and security, ends every other session at once. Changing the password or the email, turning two-step sign-in on or off and removing a sign-in method do the same. These changes, and connecting Google or Whop, ask you to confirm with your password or a code first, or to sign in again when your last sign-in was more than 10 minutes ago.