Starting Wednesday, October 28 2026, signing in to the SiteWrench Admin will require two factor authentication: entering your password and then entering a one-time code. The code comes from your email by default or from an authenticator app, if you choose to add one to your profile.
This is the same workflow you're probably accustomed to on other sites and will help ensure your site stays secure. Your SiteWrench Admin profile is your key to managing your website. A password alone is only as safe as the last place it was used (or re-used) or the last phishing email someone clicked. With a second step, a stolen password is no longer enough to get in.
Sign in with a code from your email
After you enter your password, we email a 6-digit code to the address on your admin profile. Type it in and you're in! The login screen will show a masked version of the email address, like "j***@example.com", as a reminder about which inbox to check.
A few details worth knowing:
Codes expire after 10 minutes. If yours runs out, just sign in again for a fresh one.
Didn't get it? You can ask for another code after 30 seconds. Don't forget to check your spam folder if you don't see the email.
Skip the typing. The email has a sign-in link. As long as you open that link in the same browser where you entered your password, you're in.
Watch for codes you didn't ask for. Each email lists the IP address that requested it. If you get one you didn't request, someone may know your password! Don't share the code, and reset your password right away.
If you're asked to change your password when you sign in, you'll do it right after the code step. Once the new password is saved, you're signed in. There's no second login or second code.
Or use an authenticator app
If you'd rather not wait on email, you can connect an authenticator app such as 1Password, Google Authenticator, or Microsoft Authenticator. The app shows a new 6-digit code every 30 seconds, and it works even when your inbox is slow.
Once an app is connected, we'll ask for its code when you sign in instead of emailing one. Email stays available as a backup, though, so if your phone isn't handy you may choose to get a code by email instead.
The first time you sign in with an emailed code, we'll ask once whether you'd like to set up an app. You can skip it and set one up later from the Security page, accessible via the Profile menu in the upper-right corner of the SiteWrench admin.
Setting up an authenticator app
Setup takes less than a minute.
Go to Security and choose Set up authenticator app.
Open your authenticator app and scan the QR code. If you can't scan it, type in the key shown under the code.
Enter the 6-digit code your app shows, then confirm.
The QR code is good for 15 minutes. If it runs out, start over for a new one.
Got a new phone? Choose Remove on the Security page and remove the existing code. To confirm it's you, we'll ask for a code from your current app, or one we email you. Then you can add a new code as you did before. All of your other signed-in sessions will be signed out.
Common questions
I lost my phone. Am I locked out? No. On the code screen, choose to get a code by email instead. Once you're in, go to Security and remove the old app and add a new one.
What if I enter the wrong code too many times? We block sign-in for a few minutes to stop anyone from trying to brute force their way in. Wait a bit, then try again.
Will I know if something changes on my account? Yes. We email you whenever an authenticator app is added or removed. Removing an app also signs out your other sessions.
Still stuck? Every sign-in screen has a Get help link, or email us at [email protected].
A small step for a safer site
The extra step adds a few seconds to sign-in, and it closes the most common way accounts get taken over. For the fastest sign-in, we recommend setting up an authenticator app on the Security page today.