Help Log in Sign up
Where music happens

← Help Center

When two-factor sign-in becomes required

Anyone can turn on two-factor sign-in (or add a passkey) at any

time, in Settings → Sign-in security. For most members it

stays a choice. It stops being a choice when your account can

reach a lot of people.

Your reach

Your reach is one number, added up across the site:

  • the people who follow you, plus
  • the followers of every band page you run (you created it,

or you're an admin member), plus

  • the followers of every venue page you run.

Your current reach is shown in Settings → Sign-in security.

The two lines

  • At 1,000 people, MusicXen recommends a second factor. A

banner suggests setting one up; you can dismiss it and it'll

quietly come back about a month later.

  • At 5,000 people, a second factor is required. Your

account goes read-only — you can look at everything, but

nothing can be posted or changed — and a 14-day countdown

starts. If the 14 days pass with nothing set up, the account

becomes setup-only: every page routes to the security

settings until you turn one on.

The moment any method is on — authenticator app, email codes,

text codes, or a passkey (a passkey counts, it's the

strongest of the lot) — everything unlocks, right away.

Why

If someone got your password and signed in as you, they could

post to every one of those people — as you, or as your band.

A scam or a fake announcement from a page with thousands of

followers does real damage before anyone notices. The bigger

the reach, the stronger the proof has to be. That's the whole

reason.

You're never locked out completely

Even in setup-only mode, you can always sign in (password or

email link) and open the security settings — that's the one

page that always works, because it's the page that fixes it.

If you're locked out of your account entirely, contact us and

we'll verify you another way.

← All help topics

Topics