Security screens can look similar because several of them ask you to prove something. The important question is: what is this screen asking me to prove? Understanding that question helps you choose the right information and avoid entering a code in the wrong place.

Email verification confirms access to an email address. If TraderLobby asks you to verify your email, follow the verification instructions associated with your account. That step does not connect an exchange, approve a trade, or prove ownership of every account using the same address. It has a specific purpose: confirming that you can access that email.

An authenticator adds another check during sign-in. You may see the term multi-factor authentication, or MFA. It means using more than one kind of proof to access an account. In the authenticator flow, you set up an authenticator app and enter the six-digit code it produces. The code changes over time, so use the current code for the correct TraderLobby entry. If setup asks you to confirm a code, wait for confirmation that setup succeeded.

A passkey is another way to prove that you can access the account. Instead of typing a password into TraderLobby, you approve a request through a supported device or security key. That approval might use a fingerprint, face recognition, or a device unlock method. Only approve a request you intended to start. If this is your first visit and the app requires passkey setup, follow the setup prompt before expecting passkey sign-in to work.

Now consider a forgotten password. The sign-in screen includes a Forgot password option. That flow asks for your account email and then a recovery code, followed by a new password and its confirmation. Read the code instructions on the screen. The current flow explains that requesting a newer code replaces the earlier one. Using an old message after requesting a replacement can keep you stuck even when you enter the code correctly.

A recovery message may say that a code was sent if the account exists. That wording is not a confirmation that you entered the correct email. Check the address and the expected inbox, and follow the available instructions. When the password reset succeeds, return to sign-in with the new password. Resetting a password does not necessarily remove a separate security check that your account requires.

There is also a one-time recovery code option for the authenticator sign-in challenge. This is different from the code sent during a password reset. Keep the recovery codes provided for account security somewhere private and retrievable. Do not put them in a community post, screenshot, or message asking for help. A code is useful because it can grant access; that is also why it needs protection.

For your check, imagine that a screen asks for an authenticator code, but you have opened a password-reset email. Would you use that email code here? No. Return to the instructions for the specific screen. You do not need to trigger a reset for practice. Being able to identify the correct recovery route is the skill we’re building.