FAQ: Braiins ID#

They are the same thing seen from two sides. Braiins ID is the product: the sign-in system used across Braiins. Your Braiins Identity is your own place inside it — your email address, your name and your sign-in methods. That is why it lives at identity.braiins.com.

In everyday use the two mean the same thing, and you will see both. These guides say your Braiins ID, while screens such as Secure Your Braiins Identity use the longer name.

An account is a different thing again: a shared space you own or were invited to, which can have several members. Your identity is you; an account is the space you work in.

See Understanding Braiins ID.

Braiins ID is the single sign-in for Braiins products. Braiins Hashpower uses it, and the Braiins Solo mobile app connects through it. You use one Braiins Identity everywhere — one email address, one password, one set of security methods — instead of a separate log-in for each product.

What you do inside a product stays in that product. Braiins ID holds who you are and which accounts you can reach; mining data, orders, payouts and product settings belong to the product itself.

Some products still have their own older sign-in screen. If you land on one, follow that product's own instructions — Braiins Pool or Braiins Hashpower — rather than these guides.

If you used Hashpower before Braiins ID existed, register with the same email address so your existing account comes with you. See Create your Braiins ID.

A passkey is a sign-in credential stored on your phone, computer or password manager. You unlock it the same way you unlock the device — fingerprint, face or device PIN. It replaces your password, and because your device has already checked that it is you, Braiins ID does not ask for a second step. Nothing secret is typed, so a passkey cannot be phished or reused on a fake site.

A passkey is not the same as a security key. A passkey signs you in on its own. A physical security key, such as a YubiKey, is used as a second factor after you enter your password. You can use both.

See Passkeys and Security keys.

A security key is a small physical device, such as a YubiKey, that you plug into a USB port or hold against your phone. Braiins ID uses it as your second step, after you have entered your password.

It is not the same as a passkey. A passkey signs you in by itself and replaces your password. A security key proves it is you after the password. One device can often do both jobs, but you set each one up in its own place in your Braiins ID settings.

See Security keys and Passkeys.

Yes. Sign in the way you normally do, then connect Google or Apple in Log In Methods. The two email addresses do not have to match.

You can also change the email address on your Braiins ID to the one your provider uses, and then connect the provider.

The addresses only need to match if you want to sign in with Google or Apple before you have connected them. In that case the sign-in screen matches you by email address exactly, with no variations or aliases. If you use Apple's hide-my-email option, the private relay address must match as well.

See Google and Apple sign-in.

Very little, and nothing you have not agreed to on the provider's own consent screen.

Braiins receives your email address and a provider account identifier — a fixed code that tells Braiins this is the same Google or Apple account next time. Your provider may also pass your name.

Braiins never receives your Google or Apple password, and cannot read your mail, files, photos, contacts, or anything else in your provider account. The connection only proves who you are.

If you use Apple's Hide My Email, Braiins receives the private relay address instead of your real one. That relay address becomes your Braiins ID email, so keep the relay active if you want to stay reachable.

You can disconnect Google or Apple at any time in Log In Methods, as long as you still have another way to sign in.

See Google and Apple sign-in.

Three things: a password, an authenticator app, and your recovery keys.

That is exactly what Braiins ID asks for when you register with a password, and every step has a way back. If you lose your phone, a recovery key signs you in. If you forget the password, a code sent to your email starts a reset.

Add a passkey later if you want to sign in faster. It is genuinely more convenient and harder to phish.

Do not start with only a passkey, or only Google or Apple. Those skip two-factor setup, so no recovery keys are issued — and until an authenticator app or security key is active, you cannot add a passkey or change your password, email or providers at all. Setting up an authenticator app is what unlocks the rest of your settings.

See Set up an authenticator app and Save your recovery keys.

It depends on how you sign in.

• Password: yes. If you choose a password, you must also set up a second factor — an authenticator app or a security key — and save your recovery keys. You cannot use a password on its own.
• Passkey: no. A passkey is already protected by your device, so no separate second factor is asked for.
• Google or Apple: no. Your provider handles the security of that sign-in. If you want two-factor authentication there, turn it on in your Google or Apple account.

You can add two-factor authentication at any time in your Braiins ID settings, even if you sign in with a passkey or a provider. Until you do, those settings stay locked: you cannot add a passkey, change your password or email, or connect Google or Apple.

Two-factor authentication means proving who you are in two different ways. There are three kinds of proof:

• Something you know — a password, or a device PIN.
• Something you have — the phone holding your authenticator app, a security key, the device holding a passkey.
• Something you are — your fingerprint or your face.

Two proofs of the same kind do not count. A password plus a second password is still one factor.

Four things that table is hiding:

• A passkey always proves possession, plus one other kind. The credential sits on the device, so something you have is always true. Unlocking it adds something you are if your device uses a fingerprint or face, or something you know if it asks for a PIN — whichever that device does, not both. Two kinds of proof in a single action, which is why Braiins ID does not then ask for a code.
• Some security keys carry two kinds too. A key that asks for a PIN, or has a fingerprint sensor, proves possession and something else. Braiins ID still counts it as your second step.
• Recovery keys and email codes are deliberately not factors. They exist to get you back in when a factor is out of reach. An email code gets you past a forgotten password, but where a second step is required you will still be asked for one.
• Google or Apple counts as one proof, however strong it was. Your provider may have asked for a password, or a password and a code, or a passkey of its own — Braiins ID cannot see which, so it counts the provider's answer as a single proof. Two-factor authentication on your Google or Apple account protects that account and is well worth having, but it is not your second step here. For a security action in Braiins ID — changing your password or email, adding a passkey — you still need an authenticator app or security key registered with Braiins ID itself.

The entry above covers which methods are required. See also Terms and definitions.

It depends on how many devices you use, and on what you already use to store passwords. Find the closest row — but the rule underneath the table matters more than which row you pick.

Wherever you keep everything else, keep your recovery keys somewhere separate. If your password, your six-digit codes and your recovery keys all live in one password manager, losing access to that manager locks you out of everything at once. Print them, or store them somewhere unrelated.

A note on each piece:

• Authenticator app. It needs somewhere to run, usually a phone. Many password managers can generate the same six-digit codes, which is convenient — but then one app holds both your password and your second factor.
• Passkeys are not all portable. One saved in Apple's keychain follows your Apple devices, one in Google's follows your Google ones, and one in a password manager follows the manager. A passkey held on a hardware security key stays on that key. Braiins ID lets you add more than one, so you can register a separate passkey on each device.
• Security keys travel between devices by design, because you carry the key. They suit someone who uses several machines and would rather not sync anything.

See Passkeys, Authenticator app and Recovery keys.

The names are close, but you meet them at different moments.

Recovery keys are a list of one-time codes you save when you set up your Braiins ID. Use one in place of your authenticator app or security key when you cannot reach them. Each key works only once. You can generate a new list at any time in your Braiins ID settings, which replaces the old one.

An email recovery code is sent to your email address while you are resetting a forgotten password. It only proves that you can read that mailbox. It does not replace two-factor authentication: if your Braiins ID asks for a second step, you still have to complete it.

In short: a recovery key gets you past your second step. An email recovery code gets you past a forgotten password.

See Recovery keys and Reset a forgotten password.

It depends on what your phone was being used for.

• It held your authenticator app: sign in with your password and use one of your recovery keys instead of the six-digit code.
• It held a passkey, and you have another way in: use that instead — a passkey on a different device, a security key, or your password and second step.

Once you are back in, open your Braiins ID settings, remove the method that was on the lost phone, and add a replacement. If you used a recovery key to get in, generate a new list as well.

If none of these apply and you have no other way to sign in, contact support.

Braiins ID checks every new password against lists of passwords known to have leaked, and refuses anything that appears on them. A password can be long enough, and work fine on other sites, and still be refused here — being in a leak is enough.

Choose a different one, or let your password manager generate it. The only other rule is a minimum of 12 characters.

Braiins ID never asks you to change your password on a schedule. Change it when you think someone else may know it.

See Change or reset your password.

Invite them. In Accounts, open the account and invite the person by email address. They sign in with their own Braiins ID and keep their own password and security methods — you never share credentials.

When you invite someone, you choose their account role and what they can do in each product. You can change or remove their access later, and they can leave the account themselves.

See Members and invitations.

Two different situations, with two different answers.

The new address is not used by any Braiins ID. Change your email. Your identity stays the same, so your accounts, membership and access all come with it. You need an active authenticator app or security key, and you confirm a code sent to the new address. Until you confirm it, the old address keeps working. See Change your email.

The new address already has its own Braiins ID. You cannot move the address, because one email address can belong to only one Braiins Identity. Move the account instead:

1. Invite that other identity to the account as a member.
2. Once it accepts, use Account actions → Transfer ownership to make it an owner.
3. Step down to Member, or leave the account.

The account keeps its name, its members, their access and its balances — only who owns it changes. The same steps hand an account over to a colleague.

See Change a member's account role.

Open the account in Accounts, then Account actions → Account details. It shows the account ID and your identity ID, each with a copy button.

These IDs are permanent. Renaming your identity or an account never changes them, which is why support asks for an ID rather than a name: two accounts can share a name, but an ID points at exactly one.

Include the ID whenever you contact support. Never send your password, your authenticator setup key or QR code, or your recovery keys. See What to include in a support request.

Because the Braiins Solo mobile app connects in two steps, and each one leaves a record.

• Under Braiins ID Log-Ins you see what looks like a browser session on a phone. That is real: the app signs you in through a browser, so the log-in is listed like any other.
• Under Connected Apps you see Braiins Solo itself, with the permissions you granted it.

The two records are not interchangeable when you remove them. Revoke Access on the connected app is what disconnects Braiins Solo. Logging out the phone session ends that log-in but leaves the app's own access intact, so the app keeps working. To stop it, revoke the connection — or use Log Out Everywhere, which ends every session and revokes every app connection at once. See Profile, sessions and connected apps.

Because the accounts you approve are a snapshot, taken at the moment you approved them.

A third-party app can reach the accounts you picked, and only those. An account you join or create afterwards is not added to an authorization that already exists, so the app cannot see it.

To widen the access, start a new connection from the app and approve the larger set. A third-party app asks for your approval on every new authorization anyway, even one you approved before, so there is nothing to undo first.

Between those approvals the app renews its own access in the background, within what you approved, until you revoke it. A renewal never widens what it can reach.

Braiins' own apps work differently. The Braiins Solo mobile app is granted every account you can use, recalculated each time its access renews, so a new account appears there without any approval from you.

See Review and revoke connected apps.