Account & security

The verified badge is made up of email, phone number and ID and builds trust. You verify your IBAN separately – only if you ship as a seller and receive payment online (e.g. escrow payouts).

Under “Trusted devices” you see which devices may sign in without an e-mail code; withdrawing trust from one means the next sign-in there needs a code again. To end a running session use “Sign out all other devices” — that throws every other device out at once, yours stays in. Choose a strong, unique password and change it immediately if you suspect anything; a password change also signs out every device.

In the event of violations, an account may be restricted or suspended. If your account is affected, contact support via the contact form.

An authenticator app shows a six-digit code every 30 seconds. It needs no network, no SIM card and costs nothing.

If you do not want to choose: Google Authenticator. It is the best known one, very simple, and it backs your codes up to your Google account — on a new phone they are there again. Equally good: Microsoft Authenticator (with backup, handy if you already have a Microsoft account) or 2FAS (open source, ad-free, own backup). On the iPhone the built-in Passwords app can generate the codes too — convenient, but then password and code live in the same place.

Installation: On your phone open the App Store (iPhone) or the Play Store (Android), tap the search field at the top, enter the name of the app and tap "Get" or "Install". Then come back to My account → Settings → Security, tap "Set up two-factor" and scan the QR code with the app. If you are on your phone right now, tap the direct link below the QR code instead.

Important: save the backup codes afterwards. Without your phone and without those codes you can no longer get into your account.

Two-factor authentication protects your account beyond your password: at login, Fundort asks for a 6-digit code from an authenticator app (e.g. Google Authenticator, Microsoft Authenticator or Authy). Even if someone knows your password, they cannot get in without your phone. 2FA is free and works without SMS. To enable it: Settings → Security → Enable two-factor, then scan the QR code with the app and confirm the displayed code.

When you enable 2FA you receive several backup codes once. Keep them safe (copy them or download the file) — a backup code lets you get in even if you lose your phone. Each code works only once. For security they are shown only during activation; if you lose them you can regenerate new codes anytime in Settings using a valid app code (the old ones then become invalid).

After entering your password, enter the current code from your authenticator app. If you have no access to the app right now, choose “No access to the app? Use a backup code” at login and enter one of your backup codes. If you have neither your phone nor backup codes, contact support — we can reset your 2FA after verifying your identity, after which you sign in again with password and email code.

Both are ways back into your account, so changing them is protected. For the e-mail address you have to enter your password again; the new address only becomes valid once you confirm the link sent to it, and a warning with a “this wasn’t me” link goes to the previous address. For the phone number, your existing confirmed number stays valid until you have entered the code sent to the new one — so a typo or an abandoned change does not cost you your confirmation. We also inform you by e-mail about every change. If it wasn’t you, change your password immediately: that signs out all logged-in devices.