Logging in and two-step verification

What this is for

Logging in opens your panel: bookings, documents, saved offers and points.

Two-step verification (2FA for short) is an extra lock. Even if somebody learns your password, they cannot get into your account without the second step.

Who it is for

For everyone with an account. Only people who turned 2FA on themselves in settings see the second step.

What you see

The login screen

The title "Welcome back" and the line "Your saved offers and travel plans are waiting.".

Right at the top there is the "Sign in with a passkey" button. It only appears in browsers that support passkeys — in older ones it is simply not there.

Below it the "Continue with Google" and "Continue with Apple" buttons, then the word "or" and two fields:

E-mail address — the same one you signed up with. Example: anna@example.com. Errors: "Enter an e-mail address", "Enter a valid e-mail address".

Password — your password. Next to it there is an eye icon so you can peek at it. Error: "Enter a password".

Under the fields there is a "Forgot your password?" link and the "Log in" button. At the bottom: "No account? Create one" and "Browse offers without logging in".

If you have a saved passkey, the browser may offer it by itself: click the E-mail address field and, next to the address suggestions, you will see an entry with your key. Choosing it signs you in straight away, with no password.

The second-step screen

The title "Confirm your login". The description: "This account has two-step verification turned on. Type the code from your authenticator app to finish logging in.".

Code from the app — six digits. Example: 123456. The hint under the field: "Six digits from Google Authenticator, 1Password, Authy or another TOTP app.". A TOTP app is a program on your phone that shows a new code every 30 seconds. Error: "The code must be 6 digits".

Remember this device for 30 days (tick box) Description: "On a trusted device we will not ask for a code next time you log in. Do not tick this on a shared computer.".

The "Confirm and log in" button.

Under the form there is a "Use a backup code" link. When you click it, the field becomes:

Backup code — format xxxxx-xxxxx, for example abc12-XY789. Hint: "A code in the xxxxx-xxxxx format from the list you saved when turning 2FA on. Each one works only once.". Error: "A backup code has the format xxxxx-xxxxx".

You can go back with the "Back to the app code" link.

Step by step

Signing in with a passkey (the fastest way)

1. Open the login page.
2. Click "Sign in with a passkey" (or pick the key suggestion in the e-mail address field).
3. Your browser or phone will ask how to confirm your identity — a fingerprint, a face scan or your screen lock code. Confirm.
4. You are in the panel. Done — no password and no 2FA code.

A passkey is two-factor on its own: to use it you need your device AND you have to confirm your identity on it. That is why we do not also ask for an app code. You add a key in "Settings and security" — a separate article covers that.

Signing in with a password

1. Open the login page.
2. Type your e-mail address.
3. Type your password.
4. Click "Log in".
5. If you do not have 2FA — you are in the panel. Done.
6. If you do have 2FA — open the authenticator app on your phone.
7. Copy the six digits into the "Code from the app" field.
8. On your own phone or computer you may tick "Remember this device for 30 days".
9. Click "Confirm and log in".

What happens next

After a successful login you will see "Logged in successfully." and land on the main panel. If you were trying to reach some page before, we take you back there.

Messages you may see:

• "Invalid e-mail address or password." — one of the two is wrong. We do not say which, so we do not help intruders.
• "This account has two-step verification turned on. Confirm your login with a code." — you move to the second step.
• "The code is invalid or has expired. Check the current code in your app." — codes live only for a moment. Take a fresh one.
• "This backup code is invalid or has already been used." — each backup code works once.
• "Time for entering the code has run out. Log in again." — go back to the login screen.
• "Too many failed attempts. The account is temporarily locked — try again in about fifteen minutes." — see below.

Account lock

After 10 failed login attempts we lock the account for 15 minutes. This protects you when somebody is guessing your password. A successful login resets the counter. The lock lifts by itself — you do not have to do anything, just wait.

How to recover access

This is the most important part of the article. Go through it in order — the first thing you have is your answer.

I have the phone, but the code does not work

1. Check that you are looking at the Airsockfly entry in the app — with several accounts it is easy to copy someone else's code.
2. Codes live for 30 seconds. If the timer is running out, wait for a new one and type it straight away.
3. Check automatic time setting on the phone (Settings → Date and time). TOTP codes are computed from the clock — a phone clock a few minutes behind produces nothing but wrong codes. This is the most common cause.

I do not have the phone, but I have backup codes

On the second-step screen click "Use a backup code" and enter one code from the list you saved when turning 2FA on (xxxxx-xxxxx format). Each one works only once and disappears from the list after use.

Right after logging in go to Settings → Two-factor authentication and:

• set 2FA up on the new phone (turn 2FA off and on again — turning it off uses another backup code as the second factor), or
• click "New backup codes" if the list is running low.

I have neither the phone nor the backup codes

Then you cannot get in on your own — and that is the point, otherwise the second step would protect nothing. At the bottom of the screen there is a line: "No access to the app or your backup codes? Write to us — we will help you recover the account.". Write through the contact form from the e-mail address the account uses. We will ask you to confirm your identity before we remove 2FA.

Preventing it next time

• Keep the backup codes somewhere other than the phone with the app — a password manager on your computer, or a printout in a drawer.
• In apps such as 1Password or Authy the TOTP codes sync between devices — after changing phones you have them straight away.
• Do not tick "Remember this device" on somebody else's hardware.

Frequent questions

I have both a passkey and 2FA — which one applies? Both routes work side by side. Signing in with a passkey does not ask for an app code (the key is two-factor already); signing in with a password still does.

I cannot see the "Sign in with a passkey" button. Your browser does not support passkeys or is too old. Sign in with your password.

I clicked "Sign in with a passkey" and nothing happened. Usually that means this device has no Airsockfly key yet. Sign in with your password, then add a key in "Settings and security".

I lost the phone with the app. How do I get into my account? Use a backup code from the list you saved when turning 2FA on. Click "Use a backup code". Details above, in "How to recover access".

I have neither the phone nor the backup codes. Write to us through the contact form from the account e-mail address — described in "How to recover access".

I ticked "Remember this device" on someone else's computer. What now? Go to "Settings" and turn 2FA off, then turn it on again. Trusted devices are then removed. Turning it off needs your password AND a current code (from the app or a backup code). It is also worth clicking "Log out other devices".

Can I log in with Google? Yes, with the "Continue with Google" or "Continue with Apple" button. You do not need a password then.

I am logged in on my phone and my computer at the same time. Is that a problem? No. You can see the list of devices in "Settings" under "Active sessions" and log any of them out.