Security guide

Keeping your account secure

Your FindLove account holds your profile, your conversations and the people you've connected with. This guide explains every way to sign in, how to add a second step so a password alone isn't enough, and what to do if something doesn't look right.

The short version

Add a second step

A passkey or an authenticator app means a stolen password isn't enough to get into your account.

Keep your recovery codes

You get 10 single-use codes when you turn on an authenticator app. They're shown once, so save them somewhere safe.

One change signs everyone out

Changing your password ends every other sign-in at once, on every browser and every app device.

Signing in

The ways into your account

On the website you can sign in with Google or with your email and password. The FindLove app uses your email and password.

Email and password

Your password must be at least 15 characters, and we turn down common passwords and ones known from data breaches. A few unrelated words work well. Before you can sign in with it, confirm your email address using the link we send when you join. That link works for 24 hours; if it expires, use Resend confirmation email on the sign-in page.

Continue with Google

Your Google email address must be verified by Google. If it matches an existing FindLove account, Google is added to that account and you can use either way in. If that account's email was never confirmed, its password is removed, because we can't be sure who set it. You can choose a new one in Account Settings.

The FindLove app

The app signs in with your email and password, then asks for a code from your authenticator app, a recovery code, or your saved passkey if you use two-step verification. Passkeys need an updated app and a supported device with access to your saved credential. Manage your security methods on the website.

Two-step verification

Add a second step in five minutes.

With two-step verification on, signing in takes your password or Google account and something only you have: a passkey on your device, or a code from an authenticator app. Someone who learns your password still can't get in.

It's optional, and you can set it up at any time. Until you do, we'll suggest it after you sign in.

Step 1

Open Security settings

Sign in on the FindLove website and go to Account Settings, then Security. You may be asked to sign in again first.
Step 2

Add a passkey

Give it a device label, such as "iPhone", choose Add passkey and confirm on your device with Face ID, Touch ID, Windows Hello, your device PIN or a hardware security key.
Step 3

Or set up an authenticator app

Choose Set up authenticator app, then scan the QR code or copy the manual key into an app such as 1Password, Authy or Google Authenticator. Enter the 6-digit code it shows and choose Confirm and enable 2FA.
Step 4

Save your recovery codes

When the authenticator app is on, we show you 10 recovery codes, once. Keep them in a password manager or on paper somewhere safe. Each one works a single time.
Step 5

Add a backup

Register a passkey on a second device, or keep both a passkey and the authenticator app, so losing one device never locks you out.

Choosing a method

Passkeys and authenticator apps

You can use either, or both. Having both gives you a fallback if one device is lost.

Fastest

Passkey

Approve sign-ins with your face, fingerprint, device PIN or a security key. No codes to type.
Resistant to phishing: a passkey only works on the real FindLove website or its associated app.
Synced passkeys follow you across your devices; device-bound ones stay on one device. Security settings shows which is which.
Use an updated app on a supported device to sign in with a saved passkey.

Works everywhere

Authenticator app

A new 6-digit code every 30 seconds, on the website and in the FindLove app.
Comes with 10 recovery codes for when your phone isn't to hand.
Regenerating recovery codes replaces all your old ones, so you'll need a current authenticator code to do it.
Each code works once. A code you've already used won't be accepted again.

At sign-in

What happens when you sign in

After your password or Google, we ask for your second step on any browser you haven't chosen to trust.

What we ask for

Choose Use a passkey, or enter the 6-digit code from your authenticator app. If your phone isn't with you, enter one of your recovery codes instead, like 1A2B-3C4D.

Trust this browser

Tick Trust this browser and we won't ask for your second step on that browser for 30 days. Your password or Google is still needed whenever you sign in. Don't tick it on a computer you share.

Too many wrong codes

After 5 wrong codes in a row, we pause code checks for 10 minutes. This stops anyone guessing their way in. Wait, then try again with a fresh code.

Turning it off

Disable authenticator app needs a current authenticator code or a recovery code, and removes your recovery codes. Remove passkey takes a passkey off your account. If you remove every method, signing in needs only your password or Google again.

Password and email

Changing your password or email

Both live in Account Settings on the FindLove website. Links we email you do nothing until they're used, so if one arrives that you didn't ask for, you can ignore it.

Changing your password

Go to Account Settings, then Password, and choose a new password of at least 15 characters. You carry on in the browser you used, after your second step if we ask for it. Every other browser and every app device is signed out straight away.

If you've forgotten it

Choose Forgotten? on the sign-in page, or Send reset link in the app, and we'll email you a reset link. It works once, within 24 hours. Resetting signs out every other browser and device, and your second step is still asked for.

Changing your email

Go to Account Settings, then Email, and enter the new address. We send a confirmation link to it, valid for 7 days. Your email only changes when you open that link while signed in, so a typo can't lock you out.

Confirming it's you

Account Settings asks you to sign in again if you last signed in more than 10 minutes ago. That way nobody can change your password or email from a browser you left signed in.

Staying signed in

Your signed-in browsers and devices

Each browser and each copy of the app has its own sign-in. Here's how long they last and how to end them.

Browsers

Log out ends the sign-in on the browser you're using. To sign out of every browser at once, change your password. There isn't a list of browser sign-ins yet.

App and API devices

Security settings lists every copy of the app signed in to your account, with when it signed in. Choose Sign out device for one, or Sign out all devices. The app stays signed in as long as you open it at least once every 30 days.

Your AI assistant

If you let the AI assistant in your browser search Discover for you, it works through your own browser sign-in. It doesn't get a sign-in of its own, and it stops when you turn off Browser assistant or leave Discover.

If something's wrong

If you think someone else got in

Act quickly, in this order. The first step alone shuts out anyone using your password.

1.

Change your password

This signs out every other browser and every app device immediately, including anyone who isn't you. If you can't sign in, use Forgotten? on the sign-in page instead.
2.

Check your email address

Account Settings, then Email, shows the address on your account. If it isn't yours, change it back, then change your password again.
3.

Review your Security settings

Remove any passkey you don't recognise. If you think your recovery codes were seen, regenerate them. If two-step verification is off, turn it on now.
4.

Check your app devices

Make sure nothing is listed under App and API devices that you don't expect. Sign out all devices if you're unsure.
5.

Tell us

Let us know what happened, especially if someone has sent messages or changed your profile while signed in as you.

Lost your phone or security key?

Sign in with a recovery code or another passkey, then remove the lost passkey or set up the authenticator app again on your new phone. If you've lost every second step and all your recovery codes, write to us.

Closing your account

You can't close your account from Account Settings yet. If you'd like it closed, write to us and we'll take care of it.

Need a hand? Write to us and a person on our team will help.

Check your security settings.

See your passkeys, your authenticator app and every app device signed in to your account, all in one place.

Open Security settings More guides