{"id":32974,"date":"2026-10-22T17:49:38","date_gmt":"2026-10-22T15:49:38","guid":{"rendered":"https:\/\/www.firestorm.ch\/?p=32974"},"modified":"2026-10-22T17:49:38","modified_gmt":"2026-10-22T15:49:38","slug":"better-protection-sign-in","status":"publish","type":"post","link":"https:\/\/www.firestorm.ch\/en\/news\/better-protection-sign-in\/","title":{"rendered":"Better Protection at Sign-in"},"content":{"rendered":"

Fake emails pretending to be payment reminders from FireStorm are currently in circulation. Anyone who clicks the link ends up on a copied page that tries to steal login details. To make sure a stolen password alone is no longer enough, we have added extra protection to the customer area sign-in, effective immediately.<\/p>\n

If someone without two-factor authentication signs in from an IP address that has not yet been approved for the account, we stop the sign-in. The account holder receives an email and decides with one click whether the sign-in is legitimate. For you this means at most a short extra step, for fraudsters a closed door.<\/p>\n

 <\/p>\n

\"EmailThe email shows you at a glance when and from where the sign-in came.<\/h5>\n

 <\/p>\n

Read the guide<\/span><\/a><\/p>\n

How the new protection works<\/h3>\n
\n
\"\"<\/p>\n
New IP, new email<\/strong>
When you sign in from an unknown IP address, we send you an approval link.<\/span><\/div>\n<\/div>\n
\"\"<\/p>\n
One click, 5 days<\/strong>
After the click, the IP address is approved for your login for 5 days.<\/span><\/div>\n<\/div>\n
\"\"<\/p>\n
No email with 2FA<\/strong>
With two-factor authentication enabled, this check no longer applies.<\/span><\/div>\n<\/div>\n<\/div>\n

What the email contains<\/h3>\n

The email shows the time, country, provider, IP address and browser of the sign-in. If the details match, click the link and then sign in again. The link is valid for 30 minutes, and the approval then applies for 5 days to exactly this IP address and exactly your login. Other users with access to your account approve their own IP address themselves.<\/p>\n

Warning for suspicious sign-ins<\/h3>\n

If you open the link via a different internet connection than the sign-in, we show you a clear warning. This is typical of phishing: the fraudsters sign in with your password while you receive the email at home. If it was not you, choose \u00abThis was not me\u00bb and change your password immediately. If you signed in yourself while on the road, approve with \u00abApprove anyway\u00bb.<\/p>\n

 <\/p>\n

\"WarningIf the click comes from a different connection than the sign-in, we warn you.<\/h5>\n

 <\/p>\n

Most convenient: two-factor authentication<\/h3>\n

If you would rather not receive approval emails, enable two-factor authentication. When signing in, you then additionally enter a code from an app on your smartphone, and your account stays protected even if someone knows your password. Setting it up only takes a few minutes, and our guide Setting up two-factor authentication<\/a> walks you through every step.<\/p>\n

How to recognise fake emails<\/h3>\n