Quick answer: Passwords fail at the member scale: reused, forgotten, phished. One-time codes to a registered phone or email eliminate the stored-credential attack surface entirely — nothing to leak, nothing to crack, nothing to reset.
How it works
Codes expire in five minutes with strict attempt limits and request rate-limiting.
No password database exists to breach — the classic member-org nightmare is structurally absent.
Members who struggle with every app manage a six-digit code without training.
Frequently asked questions
What if someone steals a member's phone?
Report to the admin; trashing or editing the record cuts access, and sessions expire on their own.
Are codes SMS-only?
SMS or email — the member’s registered identifiers decide.