Confirm it's you for sensitive changes
Why LightInventory asks you to confirm it's you again before sensitive changes, and why a sign-in method added in the last 24 hours cannot remove an older one.
Last updated October 31, 2026
Before a sensitive change, LightInventory asks you to confirm it's you with a passkey or your authenticator app, even in an active session. One confirmation covers the next 5 minutes. A recovery code never works for this.
Which changes ask for it
- Adding, renaming or removing a passkey, and adding or turning off an authenticator app.
- Creating new recovery codes.
- Signing out another session, or all other sessions.
More actions, such as role and billing changes, are added as those features ship.
Confirm it's you
- Start the change, for example select Remove.
- In the Confirm it's you dialog, select Use a passkey and follow your browser's prompt, or select Use your authenticator app and enter the current code.
- The change goes ahead. For the next 5 minutes, other sensitive changes do not ask again.
New sign-in methods and older ones
A passkey or authenticator app added less than 24 hours ago cannot confirm:
- removing a sign-in method that is older than it;
- turning off or replacing an older authenticator app;
- changing your password.
It can still confirm adding methods and removing methods newer than itself. If you see Confirm with a sign-in method you have had for more than 24 hours. A newer one cannot remove an older one or change your password., confirm with a method you have had for more than 24 hours.
This stops someone who briefly gets into your session from adding their own passkey and using it to remove yours. You still get an email for every method that is added.
After a recovery-code sign-in
For 24 hours after you sign in with a recovery code, sensitive changes and signing out other sessions are paused, whichever method you confirm with. The security email we send explains this. See Recovery codes.