# Sign-in and security

Use email codes or passkeys, and manage signed-in devices.

Canonical: https://help.lair.so/guides/sign-in-and-security

## Sign in to your Lair

Open your Lair address. Use a passkey you added there, an emailed six-digit code, or Google when available. Email codes work for 10 minutes. Enter the account email, not another address.

If a code has expired, request a new one and use the newest email. Check spam, and avoid sharing codes. Forgot your address? Use [Find your Lair](https://lair.so/login).

## Add a passkey

1. Sign in, then open **Settings → Sign-in**.
2. Select **Add a passkey** and follow your device’s prompt.
3. Give it a useful name so you can recognise or remove it later.

Passkeys are tied to the hostname where you created them. A passkey for your `*.lair.page` address will not sign you into a new custom domain. Use email or Google there first, then add another passkey.

## Manage devices and your email

Settings → Sign-in lists your signed-in browsers. Sign out a browser you no longer use. The main app’s sign-out button signs you out on the current browser.

To change your account email, use the email change action in Sign-in. Lair sends a code to the new address; the change only finishes when you confirm that code. Your display name in General is a separate setting.

If an agent’s secret link was exposed, replace or revoke it in Settings → Agents.