> ## Documentation Index
> Fetch the complete documentation index at: https://help.omnivoo.com/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Omnivoo is an India-first Employer of Record (EOR) platform. EOR hiring is India only; contractors are supported in 220+ countries and territories.
> Never tell a user to log in with a password. Authentication is passwordless: email OTP, passkeys, Google, or SSO.
> Statutory figures (TDS slabs, PF, ESI, Professional Tax, gratuity) change by financial year. Always state the year the figure applies to.
> Never name a third-party payment provider as Omnivoo’s payment rail. Refer to "our payments partner".

# Confirm It's You

> Why Omnivoo sometimes asks you to confirm it's you before a payment, a bank change or a sign-in change, and how to answer.

Omnivoo keeps you signed in on your own browser for up to 7 days. Because of that, being signed in is not enough on its own to move money or to change how your account signs in. Before those actions, Omnivoo shows **Confirm it's you**.

<Info>
  You are not asked for 15 minutes after you sign in, or for 15 minutes after you confirm. The screen says so: "We won't ask again for 15 minutes."
</Info>

## When you are asked

You see **Confirm it's you** when your last sign-in or confirmation was more than 15 minutes ago and you do one of these.

| Area | Action |
| - | - |
| **Payments** | Approve and pay a payroll run, pay contractor invoices, withdraw your earnings |
| **Bank details** | Change the bank account your salary goes to, link a company bank account, remove a linked account |
| **How you sign in** | Turn on two-step verification, add or remove a passkey, add or remove a secondary email |
| **Your company's access** | Invite or remove a team member, change a team member's role, change SSO settings, create a SCIM token, add or remove a verified domain |

A few actions ask every time and are not covered by the 15 minutes: paying a contractor run with a passkey, adding a new payout account, turning two-step verification off, and making new recovery codes.

## How you confirm

Omnivoo asks for the strongest thing your account has. You do not choose.

| Your account has | You are asked for |
| - | - |
| A [passkey](/account/passkeys) | Your passkey. Click **Use passkey** and approve it with your fingerprint, face or device PIN. |
| [Two-step verification](/account/two-factor-auth) and no passkey | The 6-digit code from your authenticator app. |
| Neither | A 6-digit code sent to your email. It works for 10 minutes. |

Once you confirm, Omnivoo finishes what you were doing. You do not need to click the button again.

### In the iPhone and Android app

If you turned on [unlock with Face ID or your fingerprint](/account/app-unlock), there is no screen. The app asks for Face ID, your fingerprint or your passcode, and carries on.

## If something goes wrong

**The code is not right.** The boxes clear and you can type it again. Each emailed code allows five tries. After that, click **Send a new code**.

**The email did not arrive.** Check your spam folder, then click **Send a new code**. You can ask for up to five codes in 10 minutes.

**The authenticator code is refused.** Wait for the app to show the next code and use that one. A code can only be used once.

**You pressed Cancel.** Nothing was changed. Do the action again when you are ready.

## If you get a code you did not ask for

An email with a code to confirm it's you means someone is signed in to your account and tried one of the actions above. Do not share the code. Open **Sign-in & security** and click **Log out of all devices**, as described in [Session & Security](/account/session-management#logout-from-all-devices), then write to [contact@omnivoo.com](mailto:contact@omnivoo.com).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.