Why we ask for one more verification before publishing

When you click Publish (or buy your album), we want to be sure it's really you. If we've only confirmed one of your contact details so far — your email or your phone — we'll ask you for a quick 6-digit code to confirm the other one before we let the publish or purchase go through.

What you'll see

1. You click Publish on your album.
2. A small popup appears: "One extra security step".
3. We've already sent a 6-digit code to whichever contact still needs verifying — your phone (by text) or your email.
4. Pop the code into the box. As soon as you've entered all 6 digits we check it for you.
5. Once it's a match, we take you straight to the next step — purchasing or publishing your album.

Didn't get the code?

Tap Resend code in the popup to send a fresh one. We hold off for 30 seconds between sends so your inbox doesn't fill up. Check your spam folder if it's an email, and make sure your phone has signal if it's a text. If your phone number or email address is wrong, hit Cancel, head to your profile to fix it, and try again.

Why we do this

Publishing makes your album live at a public web address, and purchasing involves real money. A second confirmation makes it much harder for anyone else to do either of those things on your behalf — even if they got hold of your password. It's a one-time check; once both your email and your phone are verified, you won't see this popup again.

This also covers Publish Changes on a live album

The same one-extra-step popup appears the first time you click Publish Changes on an album that's already live. We're sharing your updates with everyone the album is shared with, so we want to be just as sure it's you. Once both your email and phone are verified, the popup won't come back.