Signing in and security
How you get into your account, the second factor, Enhanced Security, and the log of everything that touched it.
There is no password. You sign in with a code sent to your email, or with a passkey if you have registered one.
With an email code
Enter your email, and BlockWill sends a 6-digit code. It submits itself once all six digits are in.
With a passkey
Face ID, Touch ID, Windows Hello or a hardware key. Faster than the code, and it does not depend on your inbox.
A login passkey is not a vault key. This one gets you into the account; a vault key decrypts what is inside it. They are registered separately and losing one does not affect the other.
Only one session at a time
BlockWill allows a single active session per account, deliberately. Signing in on a new device ends the old session and the previous device is told why. If you see this without having signed in somewhere yourself, treat it as a warning and check your security log.
Two-factor authentication
A second factor means a stolen inbox is not enough to reach your estate.
Scan the QR code with Google Authenticator, Authy, 1Password or similar, then enter the 6-digit code it shows to prove it worked.
Backup codes
Each code works once. They are what gets you in when the phone with your authenticator is lost, broken or wiped, so save them somewhere that is not that phone. Viewing them requires a passkey check.
Turning it off
Possible, and not recommended on an account that holds an estate.
Enhanced Security
Enhanced Security locks sign-in to passkeys you have explicitly authorised. Google sign-in and email codes stop working entirely. It is the strongest setting available and it needs at least two passkeys and 2FA already in place before you can turn it on.
Register a second passkey on a different device before enabling this, and travel with it. With Enhanced Security on and one authorised passkey left at home, there is no email-code fallback and no way in.
Turning it off needs a passkey check, so it cannot be undone by someone who has taken your inbox.
The security log
Every sign-in, failed attempt, passkey change and session eviction, with the device and time. Worth a glance after any notification you did not expect.