HoopGram
Menu

Account and secure sign-in

Manage password, authenticator, passkeys, recovery codes, and sessions in Security. Enable only a second factor you can finish yourself.

  1. After sign-in open /account/security and check that another sign-in path and recovery codes exist.
  2. To add an authenticator or passkey, finish the on-page flow. Never share the QR code, recovery codes, or password.
  3. Before losing a device, make sure another path home exists. Revoke a single device's session from Security when needed.
  4. If you forget your Hoop's password, go to /en/reset/: the reset happens on your own machine, and HoopGram holds no key to it.

Evidence

  • anonymous GET /account=302; Location=/login?returnTo=%2Faccount
  • authenticated GET /account=200 is a separate server-verified session fact
  • GET /account/security=302; Location=/account#security
  • authenticated Account UI exposes TOTP, passkeys, recovery codes, sessions