Sign in and two-factor authentication
Every Countermind account is protected by a password and a one-time code. Here is how sign-in, resets and sessions work.
Signing in
Go to countermind.zaaf.ai, enter your email and password, then the 6-digit code from your authenticator app.
Two-factor authentication
- Two-factor authentication is mandatory and can't be turned off.
- Any app that supports time-based codes (TOTP) works. The entry appears as Countermind.
- If you lose your phone, ask your Zaaf contact to reset two-factor. You set it up again at your next sign-in.
Forgotten password
- On the sign-in screen, choose Forgot your password?
- Enter your email and choose Send reset link.
- Open the email and choose Choose a new password.
For your privacy, the screen says the same thing whether or not the address has an account. Resetting your password signs you out of every device; your two-factor setup stays as it is.
Sessions and lockout
| Rule | Detail |
|---|---|
| Session length | 30 days, extended while you use Countermind. |
| Failed attempts | After 5 wrong passwords or 5 wrong codes, sign-in pauses for 15 minutes. |
| Temporary passwords | If Zaaf gives you a temporary password, you choose your own at the next sign-in. |
| Signing out everywhere | Use Sign out everywhere in account settings. |