Sign-in from a new IP address

If you sign in to the customer area without two-factor authentication, we check whether your IP address has already been approved for your account. If it is new, we stop the sign-in and send you an email with a 6-digit code. This way nobody gets into your account who only knows your password, for example after a fake email.

How to approve a new IP address

• Sign in to the customer area as usual.
• If the message «Approve sign-in» appears, open your mailbox. You have received an email with the subject «Approve sign-in: new IP address».
• Check the time, country and provider. If the details match, enter the code from the email in the browser in which you are signing in. It is valid for 30 minutes.
• The IP address is now approved for 14 days. Sign in again.

Approving with the link

Instead of entering the code, you can also click the link in the email. Ideally, open it on the device you used to sign in. If you open it via a different internet connection, for example on your phone over mobile data, we show you a warning with the details of the sign-in. If it was you, click «Approve anyway».

You did not sign in?

Then someone probably knows your password. Do not enter the code anywhere, do not click the link in the email, or choose «This was not me» on the warning page. Then change your password immediately at https://admin.firestorm.ch/index.php?rp=/password/reset and enable two-factor authentication. FireStorm will never ask you for this code by phone or email. Changing your password removes all approvals and signs out all other devices. If you use the same password elsewhere, change it there as well.

How long does an approval last?

An approval is valid for 14 days for exactly this IP address and exactly your login. Every sign-in from this IP address extends the approval by another 14 days. If your internet provider changes your IP address, for example overnight, we recognise the same provider and country, and you do not need a new approval. If you do not sign in for longer than that or use another provider, for example at the office or on the road, you will receive another email. Other users with access to your customer account approve their own IP address themselves.

View approvals and sign out everywhere

Under Account > Security settings you can see every IP address approved for your login, with country, provider, browser and last sign-in. If you do not recognise an address, remove it and change your password. «Sign out everywhere» ends all other sessions, including «Remember me», and removes all approvals except the one for your current device.

No email at all: two-factor authentication

With two-factor authentication this check no longer applies. When signing in, you additionally enter a code from an app on your smartphone, and your account stays protected even if someone knows your password. Our guide Setting up two-factor authentication shows you how to enable it.

Tip: Before entering your password, always check that the address bar of your browser shows admin.firestorm.ch.