Login and security in ZenTransfer

You log in to ZenTransfer with your email address and one-time-passwords (OTP) that we send via email.

Log in with email¶

The default method of login to ZenTransfer is with your email account. ZenTransfer will send a temporary one time password (OTP) to let you log in.

Your account is only as safe as your email account. We recommend that you use a trusted email provider for your ZenTransfer account, enable Multi-Factor Authentication (MFA), and ensure all devices with access to your email account have screen locks and pin-codes for protection.

Log in with Google¶

If you have a Google account for the same email address as you use for ZenTransfer, you can click Login with Google to use single-sign-on with your Google account. This is typically faster than receiving OTPs via email.

Authentication with passkeys¶

You can set up one or more passkeys to access your account. Click the Security button in the Dashboard and hit Add passkey. Your computer, browser, or password manager will create a new passkey and associate it with ZenTransfer.

If you want to give someone full access to your account, let them log in once with an OTP code that you receive via email, then ask them to set up a passkey. They will then be able to log in without your assistance in the future. Only do this for people you fully trust as they can potentially lock you out of your own account.

Setting up an authenticator app¶

You can disable the Email OTP in ZenTransfer by setting up an authenticator app. The OTPs required for login will then be delivered by the app, and not by ZenTransfer via email. This takes the security of your email account out of the question, but also introduces the risk that you may be locked out of your account. Use this option with caution. Good password managers are 1Password, Bitwarden, Microsoft Authenticator and Google Authenticator. We recommend that you use one that syncs across two or more devices.

We strongly recommend that you also create a passkey when using this option, so that you have two alternative ways of logging in to your account in case you lose access to your authenticator app.