Scrap Exchange Help
Web app (opens in a new tab)Download (opens in a new tab)
All help topics

Staff account security

Set up an authenticator app, backup codes, your password and the daily email.

Staff accounts can change members' accounts, so they need extra protection. Open Account security in the Oversight group to set up an authenticator app, make backup codes, change your password and choose the daily email.

How staff sign-in is protected

  • Every sign-in needs your password and a second step: an emailed code or an authenticator app.
  • Five wrong codes throw the code away; repeated wrong passwords lock the account for a while.
  • Sessions end after 30 minutes without activity, and after 7 days regardless.
  • Every decision you make is written to the audit log with your name.

An authenticator app works without email and is harder to intercept. Use Google Authenticator, Authy, 1Password or any app that makes 6-digit codes.

  1. Select Set up authenticator app.
  2. Open your authenticator app and scan the QR code. If you can't scan it, type the key shown under it.
  3. Enter the 6-digit code the app shows, to finish.
  4. Save your backup codes and select I've saved them.

From now on, sign-in asks for a code from the app instead of an emailed code.

Backup codes

  • Each backup code works once.
  • Keep them somewhere safe. They are the only way in if you lose your phone. They won't be shown again.
  • To get new ones, select Make new codes and confirm with your password. The old codes stop working at once.

Turn off the authenticator app

Select to turn it off and enter a current code (or a backup code). Sign-in goes back to the emailed code, and your backup codes are deleted.

Change your password

Enter your current password and the new one twice. Staff passwords need at least 12 characters with upper and lower case letters and a number. Changing it signs you out everywhere.

Daily email digest

The daily email digest is a morning email (after 8 am, Pakistan time) with what is waiting for a decision, yesterday's numbers and any health alerts. On Mondays it also compares last week with the week before. Days with nothing to report are skipped. It is on unless you turn it off. Select Send me a preview now to see what it looks like.