View Categories

Account Security and Sign-In

2 min read

No password means no password for anyone to steal.

Loupely Lens uses email code sign-in. You enter your email address, a 6-digit code arrives in your inbox within about a minute, you type it in. That’s the full authentication flow. Nothing credential-based is stored that could be extracted in a breach and used to access your account.

For a product like Lens, which people tend to use in bursts when a specific CSS problem comes up rather than daily, this suits the use pattern well. You’re not fighting a forgotten password every time you come back to the tool.

How it works technically #

When you request a code, the system generates a one-time token, stores a hash of it, and emails you the 6-digit code. When you enter the code, it’s hashed and compared to what’s stored. A match means you’re signed in, and the stored hash is immediately deleted. The code itself never exists in the database in a form that could be reused.

Codes expire after 10 minutes and work exactly once. If a code arrives in your inbox that you didn’t request, ignore it. Someone typed your email address by mistake. Not a security issue.

If your code doesn’t arrive #

Check your spam folder first. If it’s not there, wait a full minute before requesting another code. Multiple rapid requests don’t speed up delivery and can cause the later codes to invalidate the earlier ones. If you still don’t receive a code after 5 minutes, contact support@loupelylens.com with your account email address.

If you lose access to your email #

Because there’s no password, your email address is the only path into your account. If you lose access to the email address on file, contact support@loupelylens.com and include your original account email and any billing confirmation you have. The team will verify your identity and help you transfer access to a new address.