Login Verification, Trusted Devices and Sessions

How do you turn on login verification and manage trusted devices?

Open Account in the sidebar and click the Login verification switch in the Sign-in & security card. From then on, every login on a new device needs a 6-digit code from your email. Devices you trust skip the code for a year and are listed in the Trusted devices card, where you can revoke them; the Sessions card logs out this browser or every device. For why each setting matters, read Secure your Moonetix account.

The four controls at a glance

The Account page has a section menu at the top. Sign-in & security holds the switch, Devices holds the Trusted devices and Sessions cards, and Activity holds Recent security activity.

Step by step: turn on Login verification

1. Click Account in the sidebar, under the Account heading.
2. In the Sign-in & security card, find the Login verification row: “Ask for an email code on every new login. Trusted devices skip it for a year.” The switch says Off.
3. Click the switch. It turns on and the label changes to On for every new login.

You will see “Login verification is on. Other devices were logged out, and this device is now trusted.” The Account security box at the top of the page then counts it as done; while it is off, that box shows “Login verification off” with a Turn on link that jumps to the switch.

Why bother? A password alone can leak. CISA’s guidance on multifactor authentication says strong passwords are no longer enough on their own and that a second check blocks many common attacks. The FTC makes the same point: a second credential makes it harder for scammers to log in even if they have your username and password.

Logging in with verification on

1. Log in as usual with your email and password, Google, or Discord.
2. On a device that is not trusted, the Confirm it is you page opens and we email you a 6-digit code.
3. Enter it in Login code. Leave Trust this device for a year, so it does not ask for a code again ticked on your own device, and untick it on a shared one.
4. Click Verify and log in.

The code expires in 15 minutes. No email? Check your spam folder, or click Send a new code after a minute. Back to log in cancels. Never share the code: Moonetix support will never ask you for it. How to spot fake Moonetix support shows the usual tricks.

Turn login verification off

1. Click the Login verification switch again (its tooltip says “Turn off (needs an email code)”). We email you a code and show “We sent a code to … Enter it below to turn off login verification.”
2. Type the code into the field that appears under the switch and click Turn off.

You will see “Login verification is off, and your trusted devices were removed.” The code step exists so that someone who only knows your password cannot switch the protection off. Why account changes need a code explains this design.

Trusted devices: check and revoke

The Trusted devices card says how many devices skip login verification by email and lists each one: the browser and system, such as Chrome on Windows, a partly hidden IP address, and the Added and Expires dates. The device you are using has a This device badge.

• One device: click Revoke next to it. You will see “Device revoked. It will ask for an email code at the next login.”
• All devices: click Revoke all at the top of the card. A window asks “Revoke all trusted devices? Every device, including this one, will need an email code at the next login.” Confirm to finish.

Revoking does not log a device out right now; it only makes it ask for a code at its next login. Devices are only added while login verification is on. If the card says No trusted devices, it also tells you why: turn verification on, or tick “Trust this device” at your next login with a code.

Sessions: log out one browser or everywhere

• This browser: click Log out to end the session on this device only. The Log out button at the bottom of the sidebar does the same.
• All devices: click Log out everywhere (“Use this if you think someone else has access to your account.”). A window asks “Log out of Moonetix on every device, including this one?” Confirm, and you land on the login page.

Log out everywhere also ends every saved Keep me logged in login, but it does not remove trusted devices. If you think someone else has access, also click Revoke all and change your password. The OWASP Session Management Cheat Sheet recommends exactly these two features for any web app: a visible logout button and a way for users to end their sessions remotely.

Recent security activity

The Recent security activity card lists logins and changes to your account in the last 180 days, with the date, time and a partly hidden IP address. Entries include Logged in, Login failed, wrong password, Wrong code entered, Suspicious login blocked, Logged out everywhere, Password changed, Login verification turned on and Login verification turned off. Under the list it says “Not you? Log out everywhere and change your password.” with links to both. If you see a login you do not recognize, follow What to do if your Moonetix account is compromised.

Keep me logged in

On the login page, tick Keep me logged in for 30 days before you log in. It also works with the Google and Discord buttons. Without it, the browser logs you out when you close it. The Sessions card tells you which of the two applies to the browser you are using. Changing your password or turning on verification ends saved logins on your other devices. The Privacy Policy lists the same limits (checked on November 4, 2026): trusted devices up to 12 months, saved logins up to 30 days, or until you remove them or log out.

On a phone

Tap More in the bar at the bottom of the screen, then Account. Tap Devices in the section menu, or scroll past Sign-in & security to Trusted devices and Sessions. The sidebar is hidden on a phone, so log out with the Log out button in Sessions or at the bottom of the More menu.

Frequently asked questions