Account security

Security settings are in your profile: Settings → the Security tab. It has three items: two-factor authentication, password and social sign-in. Click an item to open it.

🔑 Ways to log in

• Email and password.
• Magic Link — a one-time sign-in link is sent to your email, no password needed.
• Google, Discord or Yandex — sign in with a social account.

You can connect several social accounts to one CAICHAT account: Security tab → Login via social networks → Connect next to Google, Discord or Yandex. It also shows which ones are already connected. You can’t disconnect the last connected account — at least one has to remain.

Caution

Signing in with a social account bypasses two-factor authentication. Keep this in mind if you turned on 2FA for maximum protection.

🔒 Password

• Set a password. If you signed up with a social account or a Magic Link, your account may not have a password. Open Security → Password, enter a new password twice and click Set password. A password is needed, for example, to turn on two-factor authentication.
• Change your password. In the same place, enter your current password and the new one twice, then click Change password. Tick Sign out of all active logins if you want to log out of all other devices.

A password must be 8 to 64 characters long: Latin letters, digits and special characters.

If you forgot your password

1. On the login screen, click Forgot password?.

2. Enter the email you signed up with and click Reset password.

3. Open the email, follow the link and set a new password. If the link has expired, request a reset again.

Another option is to log in with a Magic Link and then change your password in the settings.

🛡️ Two-factor authentication (2FA)

2FA adds a one-time code from the Google Authenticator app to your login. Even if someone learns your password, they can’t log in without your phone. The same code is needed to confirm withdrawals.

1. On the Security tab, click Two-factor authentication and enter your account password. If you don’t have a password yet, the site offers to create one: the Create password button.

2. Install Google Authenticator on your phone.

3. Scan the QR code with the app or enter the key manually. Save the key somewhere safe: it helps you recover access if you lose your phone.

4. Enter the 6-digit code from the app.

5. Download or copy the backup codes. Each code works once: you can use it to log in when your phone isn’t at hand.

When you log in with 2FA on, the site asks for a code from the app. Tick Trust this device for 30 days so you don’t have to enter the code every time on your own computer.

You can turn off 2FA on the same tab — you’ll need your password.

💡 Tips

• Don’t reuse your CAICHAT password on other sites.
• Never share codes from Google Authenticator or backup codes with anyone — not even people who claim to be support.
• Verify your email: account recovery links are sent to it.

❓ Related questions

I lost the phone with Google Authenticator

Log in with one of your backup codes, then turn off 2FA and set it up again on the new phone. If you have no backup codes but saved the key, add it to Google Authenticator on the new phone. If you have neither, write to support.

The code from the app doesn’t work

Make sure the time on your phone is set automatically: codes depend on the exact time. Enter the latest code — it changes every 30 seconds.

The Magic Link doesn’t arrive

Check your spam folder. The link can be used only once and is valid for a limited time — if it has expired, request a new one.