Most users sign in with a 6-digit code we email them, instead of a password. This article covers how the codes work, what to do when something goes wrong, and the limits.
How it works
- You enter your email on the sign-in screen.
- We send a 6-digit code to that email.
- You enter the code. You're in.
For new users, this also creates the account — you don't have to set a password upfront. You can set one later from Account settings if you want.
For existing users with a password, you can either enter the code or use your password. The system shows whichever option is available for your account.
What the email looks like
Subject and content depend on whether you're new ("Welcome — confirm your email") or returning ("Sign in to Loudplay"). The code is a 6-digit number, valid for a limited time. Use it within a few minutes of receiving it; codes expire on the server side.
Didn't get the code
Check the obvious things first:
- Spam / Promotions folder. Gmail and Outlook sometimes filter the first email from a new sender.
- Typos in the email. If you typed your address wrong, the code went to the wrong inbox. Try again with the correct email — see the rate limit note below.
- Old domain blocks. Corporate email systems sometimes block automated mail. Use a personal Gmail/Outlook account for the test.
If none of those, request another code by hitting Resend on the sign-in screen.
Rate limits
We rate-limit code requests to prevent abuse:
| Limit | Per |
|---|---|
| Maximum codes sent | 10 per hour, per email address |
| Maximum verification attempts | 10 per code |
If you hit the hourly send limit, wait an hour and try again. If you hit the verification-attempt limit, request a new code.
If you've genuinely hit a wall — wrong email earlier, code never arrived, you've tried multiple times — write to help@loudplay.io. We can verify your account manually.
"I entered the code, it says invalid"
Two common causes:
- Old code. If you requested two codes in a row, only the most recent one works. The older code is invalidated.
- Spaces or extra characters. The code is 6 digits, nothing else. Don't paste with leading/trailing spaces.
If both look fine and the code still fails, request a new one. After two failed attempts on the same code, we recommend stopping and going through email-based recovery instead — see "Forgotten password and login problems".
"I'm not sure my email is registered"
Our login API always returns "code sent" regardless of whether the email is in our database. This is a security measure — it stops bad actors from probing the system to see which emails have accounts.
What it means for you: if you don't get a code and you're sure the email is right, the email might not be registered after all. Try signing up as a new user (the same flow) — it'll just create the account if there isn't one yet.
Why codes instead of passwords
Codes are more secure for most users — there's no password to forget, leak, or be reused from a compromised site. They're also faster than the typical "click email link to reset password" flow, because the code goes directly into the same form you're already on.
You can still set a password after signing in if you prefer that flow. Account → Security → Set password.