Signing in

The portal uses your email address and the password you chose during setup. If you have enrolled an authenticator app, you will also be asked for a six-digit code.

Signing in

1. Go to the portal and enter your email address and password on the Sign in screen.
2. Click the sign-in button. If you have no second factor enrolled, you land on your dashboard.
3. If you have an authenticator app enrolled, the portal shows Two-Factor Authentication. Open your authenticator app and type the current six-digit code.

If the code is wrong the portal says Invalid verification code. Please try again. Codes rotate every thirty seconds, so if one is rejected, wait for the next and try that.

If the two-factor screen sits for too long you will be returned to the sign-in screen with Your session expired. Please sign in again. Nothing is wrong — just sign in again.

If you cannot reach your authenticator

On the two-factor screen there is a link reading Lost your authenticator? Use a recovery code.

1. Click it. The portal shows Use Recovery Code.
2. Enter one of the recovery codes you saved when you enrolled. They look like XXXX-XXXX-XXXX; spaces and lower case are fine, the field tidies them up.
3. Submit. You are signed in.

A recovery code is consumed when used and cannot be reused. Two-factor authentication stays enabled on your account. If you are running low, generate a new set from Settings → Security — see Two-factor authentication.

Forgotten password

1. On the sign-in screen, click Forgot password? next to the password field.
2. Enter your email address and submit. You will see Password reset email sent! Please check your inbox.
3. Open the email and click the reset link.
4. Choose a new password. The screen shows a live checklist — at least 8 characters, one uppercase letter, one lowercase letter, one number, one special character — and each item ticks as you satisfy it.
5. Submit, then sign in with the new password.

If the link has expired you will see This password reset link is invalid or has expired. Please request a new one. Use the Request New Reset Link button on that screen.

Too many failed attempts

After five failed sign-in attempts the portal locks the form for sixty seconds and shows Too many failed attempts. Please try again in {n}s. From the third failure onward it warns you how many attempts remain before that happens.

The lock is a timer, not a block on your account, and it clears itself. Password reset stays available throughout — the lockout screen links to it — so if you have simply forgotten the password, reset it rather than waiting out the timer.

Wrong credentials always produce the same message, Invalid email or password., whichever of the two was wrong. That is deliberate: it stops the sign-in screen being used to work out which email addresses have accounts.

“Someone added 2FA to your account”

If you receive an email saying two-factor authentication was added to your account and it was not you, the email contains a link to undo it. Opening it shows Remove Two-Factor Authentication along with the address affected, and one button to remove the enrolment.

Use it, then change your password immediately and tell Barkr — see Contacting support.

Staying signed in

Your session persists between visits; you do not need to sign in every time. Some actions — deleting a submission, turning off two-factor authentication — ask you to confirm your identity again. Having signed in or confirmed within the last fifteen minutes, you will not be asked a second time.

You can review where your account is signed in under Settings → Security.