Every time you sign in to UpMarket, we protect your account with two-step verification (2FA): after your email and password, we send you a one-time code to enter. This article explains how the code works and why you shouldn't normally need one several times a day.
Where your code comes from
We send an 8-digit code by email (and by WhatsApp if you've set that up).
The code is valid for about 10 minutes.
If it doesn't arrive, you can resend it by WhatsApp up to 3 times.
If you enter the wrong code 5 times, that code stops working and you'll need to request a new one. Repeated failures temporarily lock sign-in for 15 minutes to protect your account.
How often you should need a code
You should not need a new code several times a day. Once you've signed in, you stay signed in for up to 8 hours — and that window refreshes every time you use UpMarket. So during an active working session, you won't be asked to verify again.
You'll be asked for a fresh code when:
your session has expired after a long period of inactivity (around 8 hours);
you signed out;
you're signing in on a new device or browser; or
your browser has cleared the UpMarket session cookie.
If you're asked for a code too often
Being prompted many times a day usually means your browser isn't holding on to the session cookie. Check the following:
You're not browsing in private/incognito mode (it discards cookies when the window closes).
Cookies are allowed for my.upmarket.cloud, and your browser or privacy settings aren't blocking them.
Your browser isn't set to clear cookies on close, and security software/VPNs aren't wiping them.
You're staying in the same browser and device rather than switching between them.
You're not clicking Log out at the end of each visit.
Good to know
There is no separate "two-factor authentication" to switch on or off — the login code is built in and always on for everyone, as a security requirement. Never share your code with anyone, including people claiming to be from UpMarket.
If you've checked the points above and are still asked for a code every few minutes, that's not expected — contact support and tell us which browser and device you're using.