The ZeroTwo sign-in screen has no password field, so it confirms it is you in other ways. Depending on how you sign in and how your account is set up, you may be asked for an emailed link, a text-message code, a CAPTCHA, or a code from an authenticator app.
What you might be asked for
| What you see | Why it appears | What to do |
|---|---|---|
| A "Check your email" screen | You entered an email address. Opening the link is how ZeroTwo confirms the address is yours. | Open the link within 1 hour. If it does not arrive, choose Resend magic link (it works again after a short wait) or Use a different email. On the desktop app the link opens in the system browser and hands you back to the app. |
| A six-digit code sent by text message | You chose Continue with phone. | Type the code on the next screen and choose Verify, or choose Resend code. See How does phone sign-in work in ZeroTwo? |
| A CAPTCHA box from Cloudflare Turnstile | On the web sign-in page it appears under the field once you have typed a valid-looking email address or a complete phone number, and Continue stays unavailable until it is complete. It also appears on the phone code screen, where Resend code needs a fresh check. The iPhone, iPad and Android apps do not show it. | Complete the check. If ZeroTwo says it failed, refresh the page and try again. |
| A "Two-Factor Authentication Required" window | You turned on two-factor authentication in Settings > Security. It appears after any sign-in method, on the web, the desktop app, iPhone, iPad and Android. On Android the heading reads "Two-factor authentication required". | Enter the six-digit code from your authenticator app and choose Verify & Continue (Verify on Android). You cannot continue without the code. Closing the window returns you to the sign-in screen, sometimes with the message "Multi-factor authentication is required to continue." |
| "Unusual activity detected. Please use email login with CAPTCHA verification." | Before it starts Google, Apple or Microsoft sign-in, the web sign-in page checks whether the browser looks automated, for example a headless or WebDriver-controlled browser, or interaction that looks scripted. | Use the email option instead and complete the CAPTCHA, or sign in from a regular browser window. |
Messages you may see
| Message | What it means | What to do |
|---|---|---|
| "Please wait a moment before requesting another link." (or "...another code.") | On the web sign-in page, you asked for a second email or text within about a minute of the first. | Wait a minute, then use the resend button. |
| "Your magic link has expired or is invalid. Please request a new one." | The link is older than 1 hour or cannot be used. | Request a new link. |
| "Your authentication session expired. Start sign-in again in this browser and open the new link here." | The sign-in you started has expired, or the link was opened somewhere other than the browser where you started. | Start again and open the new email's link in that same browser. |
| "Too many magic link requests for this email. Please try again later." | ZeroTwo limits how many links can be requested for one address, and from one network, in a period of time. | Wait before asking again, or use another sign-in method. |
| "Please complete the captcha to continue." or "Captcha verification failed. Please refresh and try again." | The CAPTCHA was skipped or did not check out. | Complete it, or refresh the page and retry. |
If a block message mentions Cloudflare or a "ray", see Why does ZeroTwo say I've been blocked? For the list of sign-in methods, see Can I change how I sign in to ZeroTwo? If you received a sign-in email you did not ask for, see What should I do about a sign-in email I didn't request?