Keep your account safe

A code from Second Life always signs you in, so you can never be locked out for good. To sign in without going in-world, add a password or a passkey, and make a password safer with an authenticator app. All of it is in Account settings.

Add or change your password

1. In Password, type a New password of at least 12 characters, and type it again in Type it again.
2. If you already have one, also type your Current password.
3. Press Add password or Change password.

Your username is any of your avatars' SL usernames. This is your Civitas password, never your SL one. Changing it signs you out everywhere else you were signed in.

Forgot it? Sign in with a code from Second Life. For 15 minutes after, you can choose a new password here without typing the old one.

Add a passkey

A passkey signs you in with your fingerprint, face or device PIN. Your phone, computer or password manager keeps it, and it only works on cmty.app, so nobody can trick you into using it on another site.

1. In Passkeys, give it a Name (optional), like the device it's on.
2. Press Add a passkey and follow your browser's prompts.

Next time, press Use a passkey on the sign-in page. To remove one, press the delete button beside it. Then also delete it from your device or password manager, since it no longer works.

Add an authenticator app

With an authenticator app, signing in with your password also asks for a 6-digit code from an app on your phone, like Microsoft Authenticator, Google Authenticator or your password manager. It needs a password, so add one first.

1. In Authenticator app, press Set up an authenticator app.
2. Scan the QR code with the app, or type in the key shown beside it.
3. Type the code the app shows in Code from the app and press Turn on.

To remove it, type a code from the app and press Remove the app. Lost your phone? Sign in with a code from Second Life, and you can remove it without a code.

If someone guesses at your password

After 10 wrong passwords or app codes in a row, signing in with a password pauses for 15 minutes. Codes from Second Life still work.

Communities that ask for more

A community's owner can make everyone who manages it sign in with a passkey or an authenticator app. Until you do, you can see everything your roles let you see there, but change nothing. Add either one here, then sign in with it.

Civitas staff will never ask for your password.