Email verification and two-factor authentication (2FA)
Curator protects your account with email verification at signup and optional two-factor authentication (2FA) at login. Both use a 6-digit code sent to your email address. Each code expires after 10 minutes, can be used once, and can be resent after a 60-second wait.
Verify your email at signup
After you create your account, you verify the email address before you reach the dashboard.
Create your account on the sign-up page (see Creating Your Account).
On the Verify your email page, enter the 6-digit code we sent to your email address. The page shows the address it was sent to.
Click Verify. The code field accepts six digits and submits automatically once the sixth is entered.
The code expires after 10 minutes and stops working after five incorrect attempts. If it expires, click Resend code to get a new one; the new code replaces any code you have not used yet.
Log in before verifying your email
If you log in before verifying, you are taken straight to the Verify your email page. Your account stays there until the email is verified, so verify the address before continuing to the dashboard.
Change your email during verification
If you made a typo at signup, fix the address before verifying.
On the Verify your email page, click Wrong email? Change it.
Enter the correct email address and click Update email. Click Cancel to keep the original address.
We send a new code to the address you entered. The address changes only after that code is verified.
Change your email on a verified account
Once your account is verified, change your email from your profile instead of the verification page.
Go to your profile and click Change email.
Enter the New email and your Current password.
Enter the code we send to the new address. Your email changes once the code is verified.
Enable 2FA
2FA adds a second check at login: after your password, we send a 6-digit code to your email address. It is optional and set up per user, from the Security page.
In your account navigation, click Settings then Security.
In the Two-factor authentication section, click Enable 2FA.
Enter the 6-digit code we sent to your email address and click Verify & enable. The code field submits automatically once the sixth digit is entered.
The page shows Status: Enabled when 2FA is active. You can click Resend code after the 60-second wait if the code has not arrived.
If your account does not show the Security navigation link, two-factor authentication is not currently available on your account, and the Security page states that 2FA is currently unavailable.
Log in with 2FA
With 2FA enabled, every login asks for a code after your password, including sign-ins with Google.
Sign in with your email address and password (or with Google).
On the Two-Factor Authentication page, enter the 6-digit code we sent to your email address.
Click Verify to finish signing in.
The code expires after 10 minutes and stops working after five incorrect attempts, which shows the message Invalid or expired code. Click Resend code after the 60-second wait to get a new one. Click Back to login to start over.
Turn off 2FA
Disable 2FA from the Security page when you no longer want the extra login check.
In your account navigation, click Security.
Next to Status: Enabled, click Disable 2FA.
Click Confirm disable. Depending on your account settings, you are asked to enter your password first.
2FA turns off immediately and your next login needs only your password. To turn it back on later, repeat the steps under Enable 2FA.