Sign-In & Security

Manage sign-in methods, password, two-factor authentication, passkeys, and signed-in device sessions in one place.

Entry: Sign in at passport.swaymoon.com → Sign-In & Security

Some actions are sensitive. The system may ask you to re-verify your identity before you continue.

Sign-in methods

Username, email, and phone number can all sign in to the same Swaymoon Account. One account can link multiple emails and phone numbers.

• Add: Enter a phone number or email → send a verification code and confirm the link (on supported setups, a phone number can also use “this-device number verification”).
• Set as primary: On the Sign-in methods detail page, tap Set as primary on a non-primary item. The primary sign-in method affects the account’s default display, and which notification email is chosen (the primary email is preferred).
• Remove: You can remove an email or phone number; username cannot be removed. You cannot remove the last remaining sign-in method, and you cannot remove the last remaining email.
• Keep at least one contact method that can reliably receive verification codes.

You must link at least one email before you can use features that depend on a real email address, such as Hide My Email. Some sensitive actions (such as linking / unlinking, or setting as primary) may ask you to sign in again to confirm your identity.

Password

A password is optional. Passkeys and verification codes are usually more secure.

• Set / update: Set a new password in the Password section. If a password already exists, you must enter the current password first.
• Turn off password sign-in: If a password is already set, enter the current password, then you can turn it off. After that, sign in with a passkey or a verification code instead.
• Forgot password: On the sign-in page, choose Forgot password?, or tap Forgot current password? on this page. After you verify your identity with a passkey or a verification code, you can reset the password directly, or choose Turn off password sign-in (current password not required).

Do not reuse easy-to-guess passwords from other sites, and never tell anyone your password in email or chat.

Two-factor authentication

When this is on, sign-in requires an extra verification code sent to your account, in addition to the original method. That lowers the risk if someone only has your password.

• Turn it on or off in Two-factor authentication.
• Make sure your phone number or email works, so you can complete the second step.

Passkeys

A passkey (Passkey) lets you sign in with Face ID, Touch ID, device unlock, or a security key, without memorizing a password.

1. In Passkeys, enter a name (for example, “This computer”).
2. Tap Add passkey, then complete local verification as the system prompts.
3. You can add passkeys from multiple devices. For a device you no longer use, delete the matching passkey promptly.

If the device indicates that it supports passkeys, you may also see a suggestion to add one after you sign in. Follow the prompts to finish.

Devices and sessions

Devices and sessions lists currently active browser sessions (including approximate time and network address).

• Tap Sign out on a suspicious session.
• Use Sign out of all other devices to keep the current session and end the rest.

If you suspect the account has been taken over: immediately sign out other devices → change the password or delete unknown passkeys → check sign-in methods → if needed, contact hello@swaymoon.com.

Related guides

• Sign In — everyday sign-in and creating an account for the first time
• Hide My Email — hide your real email address
• Export Data and Delete Account — what to do when you leave the service