Why every Uptimix login asks for a code

Most products treat two-factor authentication as a power-user setting: buried in preferences, off by default, adopted by the people who least need the nudge. We went the other way. Every Uptimix login asks for a second factor. There is no off switch.

Why so strict?

Think about what a monitoring account can do: silence alerts, delete monitors, change who gets notified. A compromised account doesn't just leak data; it blinds you during the exact window an attacker wants you blind. The account guarding your uptime should be at least as hard to steal as your email.

Email codes by default, authenticator when you're ready

Out of the box, each sign-in emails you a short-lived code: no setup, works for everyone. When you want something stronger, enable an authenticator app in account settings: it replaces the email codes entirely, and you get single-use backup codes for the day your phone goes missing.

To keep the friction honest, you can trust a device for 30 days. Your everyday laptop asks once a month; a new device always asks.

The details that matter

Codes expire quickly and burn after use. Repeated failed attempts lock the challenge and force a fresh start. And enabling or disabling any of it lands in the audit log, because security changes are exactly the events a team should be able to reconstruct later.