How is my sign-in different from the site owner's?
Site owners access their websites through their Lumio Portal. As a collaborator, you sign in at the website's own login page with the username and password we set up for you. The login page will mention the portal — that part is for owners; your way in is the form itself.
Why did a security screen ask me for a code?
Every so often — usually when you're signing in from a new device or after some time away — the site's security system adds one extra check: a six-digit code from your phone.
If you haven't set up a code app yet, the next sections walk you through it — about two minutes, once.
What is two-step verification?
Two-step verification asks for one extra thing along with a password: a six-digit code from your phone that changes every 30 seconds. Even if someone got hold of a password, they still couldn't get in without your phone.
Security is always a balance between simplicity and protection — the more locked down something is, the harder it tends to be for the people who genuinely need access. Two-step verification is one of the rare measures that adds real protection without adding real complication, which is why it protects every site we manage.
Which app should I use for my codes?
Any authenticator app works. Here's what we recommend, in order of least effort:
If you have an iPhone or Mac: you already have what you need. Apple's built-in Passwords app generates these codes, syncs them across your Apple devices, and fills them in for you. Nothing to install. Apple's own guides show exactly where to find it on iPhone and on Mac.
If you use 1Password: add the code there, right alongside your saved passwords. One app for everything, and it fills both in together.
Otherwise: Google Authenticator is free for iPhone and Android. One important step: when you open it for the first time, sign in with your Google account. That backs your codes up automatically, so a new phone or a lost phone doesn't lock you out.
How do I set it up?
You'll do this once, and it takes about two minutes. Have your phone ready.
-
https://yoursite.com/wp-login.php - Enter your username and password
-
A prompt will ask you to setup two factor authentication, click setup now.
-
On the setup screen you'll see a square QR code.
-
Open your authenticator app and choose add (usually a + button), then scan QR code. Point your phone's camera at the square code on your screen.
-
Your app will show a six-digit code. Type it into the box on your screen and confirm.
-
You'll be shown a set of recovery codes. Save them before you finish — the next section explains why.
From then on, when the security screen appears, it's a glance at your phone and you're through.
What are recovery codes, and where do I put them?
Recovery codes are important! These are your spare keys. If your phone is ever lost, broken, or replaced, any one of these codes gets you in — each works once.
Save them somewhere that isn't your phone: your password manager, a note in Apple Passwords, or printed and kept wherever you keep important papers. Please don't skip this — it's thirty seconds now that can save you real trouble later.
I got a new phone — what do I do?
If your codes were backed up (signed in to Google Authenticator, or using Apple Passwords or 1Password), they'll appear on your new phone automatically — nothing to do.
If they didn't come across, use one of your recovery codes when the security screen asks, then set up the new phone from the same setup screen.
And if you're locked out entirely: message us in the chat or at support@lumio.host. We can securely reset the verification on your account and get you signed back in. You're never stranded.