Skip to main content
Step-up verification is an extra identity check that Odin requires before you can perform sensitive actions. Even though you’re already signed in, you’ll be asked to confirm your identity again to protect against session hijacking and unauthorised changes.

How it works

When you trigger a protected action, a verification dialog appears. You can confirm your identity using either method:
  • Passkey: if you have a passkey registered, this is the default. Tap your fingerprint sensor, use Face ID, or insert your security key.
  • Email OTP: a 6-digit code is sent to your email address. Enter it within 5 minutes.
Once verified, the action proceeds.

How long a verification lasts

A verification lasts 5 minutes, and Odin reuses it for the rest of that window. If you invite three people and then change someone’s role, you verify once at the start instead of before each action. After 5 minutes the dialog comes back. Reloading the page clears the verification too, since Odin holds it in the browser tab rather than in your session.
Registering a passkey makes step-up verification faster. Instead of waiting for an email code, you can verify with a single biometric prompt.

What requires step-up verification

Apart from the two Profile rows, every action here is admin-only, so members only meet the dialog on their own profile. One exception to the Team Management row: the invites you send from the welcome flow when you first set up your organisation don’t ask you to verify.

OTP verification

1

Dialog appears

When you trigger a protected action, the verification dialog opens and an OTP code is sent to your email automatically.
2

Enter the code

Type the 6-digit code from your email. Verification happens automatically once all digits are entered.
3

Action completes

The protected action proceeds as normal.
If the code doesn’t arrive, click Resend code after the 60-second cooldown. Codes expire after 5 minutes.

Passkey verification

If you have a passkey registered, the dialog defaults to passkey verification. Follow your device’s biometric or security key prompt to confirm your identity. You can switch between passkey and OTP verification at any time using the link at the bottom of the dialog.