Confirming Sensitive Actions

Why Luma sometimes asks you to confirm a code before certain actions, even when you’re already signed in.

For certain higher-risk actions, Luma asks you to confirm it’s really you — even though you’re already signed in. When this happens, you’ll see a Confirm Access prompt before the action goes through.

This is an extra checkpoint on a small set of actions that could do real harm if someone else got into your account, such as exporting personal data about your guests and members, changing how you sign in, or managing payouts.

Note: we strongly recommend setting up a Passkey. This will make your account more secure and it will also make it much faster to confirm sensitive actions.

How It Works

When you start one of these actions, Luma shows a Confirm Access prompt.
Choose an available confirmation option. You may see options to use a passkey, receive a code by SMS or WhatsApp, or receive a code by email.
Complete the prompt to continue.

If you recently added a passkey or phone number, you can’t use it to confirm sensitive actions right away — there’s a waiting period of a few days. Use another option, like an email code, in the meantime.

Once you’ve confirmed, you won’t be asked again for a short window, so you can complete a few of these actions in a row without re-entering a code each time. Codes expire after a while — if yours has, just request a new one.

Why We Do This

Being signed in shows that you logged in at some point — it doesn’t prove the person taking an action right now is you. If someone gained access to a device where you’re already signed in, this step stops them from taking the most damaging actions without also proving control of one of your trusted methods.

In other words, it’s a second lock on the actions that would hurt the most if your account were ever compromised, so a stolen session alone isn’t enough.

If a Code Doesn’t Arrive

If you chose email, check your spam folder and make sure the email on your account is current. If you’ve recently changed your email, update it in your account settings so codes reach you.

If you chose SMS or WhatsApp, make sure your phone number is linked to your account and can receive Luma messages. If you’ve opted out of messages, see SMS / WhatsApp Messages for how to reactivate them.

If the code still doesn’t arrive, see Not Receiving Emails from Luma for next steps.