Account security & 2FA
Your owner account holds everything about your families, so it's worth a few minutes to lock it down. Everything below lives on the Account security page.
Password
Use a strong password you don't use anywhere else — a password manager makes this painless. You can change your password at any time from the Account security page.
Two-factor authentication (2FA)
- Click to enable two-factor authentication, then scan the QR code with an authenticator app such as Google Authenticator, 1Password, or Authy.
- Enter the 6-digit code from the app to confirm.
- Save your recovery codes somewhere safe — download or print them. They're your own way back in if you ever lose your phone.
After that, signing in asks for a code from your app. Tick remember this device during sign-in and Wylari won't ask again on that device for 30 days.
Recovery codes & trusted devices
- Each recovery code works once. When you're running low, regenerate a fresh set.
- Review your trusted devices list occasionally and remove any you no longer use.
- Keep the phone and email on your account current — if you lose both your authenticator and your recovery codes, we can only remove 2FA after verifying your identity through them.
What about staff accounts?
Employees don't use passwords at all. They verify their work email once per device, then sign in with their PIN — and that PIN only works on devices they've already verified, so staff sign-in is protected by design.