# Confirm it's you for sensitive changes

> Why LightInventory asks you to confirm it's you again before sensitive changes, and why a sign-in method added in the last 24 hours cannot remove an older one.

Source: https://www.lightinventory.com/help/account-and-sign-in/confirm-sensitive-changes · Last updated: 2026-10-31

Before a sensitive change, LightInventory asks you to confirm it's you with a passkey or your authenticator app, even in an active session. One confirmation covers the next 5 minutes. A recovery code never works for this.

> **Note:** LightInventory is in development and not yet generally available. This page describes sign-in as designed. Step-by-step screenshots are added as each screen ships.

## Which changes ask for it

- Adding, renaming or removing a passkey, and adding or turning off an authenticator app.
- Creating new recovery codes.
- Signing out another session, or all other sessions.

More actions, such as role and billing changes, are added as those features ship.

## Confirm it's you

1. Start the change, for example select **Remove**.
2. In the **Confirm it's you** dialog, select **Use a passkey** and follow your browser's prompt, or select **Use your authenticator app** and enter the current code.
3. The change goes ahead. For the next 5 minutes, other sensitive changes do not ask again.

## New sign-in methods and older ones

A passkey or authenticator app added less than 24 hours ago cannot confirm:

- removing a sign-in method that is older than it;
- turning off or replacing an older authenticator app;
- changing your password.

It can still confirm adding methods and removing methods newer than itself. If you see **Confirm with a sign-in method you have had for more than 24 hours. A newer one cannot remove an older one or change your password.**, confirm with a method you have had for more than 24 hours.

This stops someone who briefly gets into your session from adding their own passkey and using it to remove yours. You still get an email for every method that is added.

## After a recovery-code sign-in

For 24 hours after you sign in with a recovery code, sensitive changes and signing out other sessions are paused, whichever method you confirm with. The security email we send explains this. See [Recovery codes](/help/account-and-sign-in/recovery-codes).

## Related

- [Passkeys](/help/account-and-sign-in/passkeys)
- [Authenticator app](/help/account-and-sign-in/authenticator-app)
- [Sessions](/help/account-and-sign-in/sessions)