Keeping your owner account safe
As a club owner you can see payments, members’ details — including children’s — and their documents. That’s why your account deserves the strongest protection.
Why it matters
Someone who takes over an owner’s account could see members’ and families’ personal details, signed documents and payment history, change billing settings or invite strangers into the club. A password alone is easy to phish or guess — a second sign-in step (a code from an app on your phone, or your fingerprint or face) stops that.
2-step verification is required
Club owners and coaches who sign in with email and password must have 2-step verification turned on. Right after signing in (an owner: right after creating the club; a coach: right after the owner makes them a coach) Sport Match shows Set up two-step verification — the rest of the app stays locked until it is done. It takes about a minute.
-
Install an authenticator app on your phone, for example Google Authenticator, Microsoft Authenticator or 1Password.
-
Scan the QR code on the screen with the app. Setting up on the same phone? Tap Open it in your authenticator app, or type in the setup key.
-
Type the 6-digit code the app shows and click Turn on.
Finally Sport Match shows 10 recovery codes — download them, print them or keep them in your password manager, away from your phone (you’ll need one if you lose it). From then on, every password sign-in also asks for a code from the app. The code changes every 30 seconds and each one works only once. On devices where you were already signed in, sign in again.
Tip: Settings → Security shows since when it is on and lets you move it to a new phone (Move to a new phone). A club owner or coach cannot turn it off.
In the same place, under Recovery codes, you see how many codes are left; with 3 or fewer you get a warning. Create new codes replaces the whole set — the old ones stop working. Turned verification on before recovery codes existed? After you sign in, Sport Match offers Create your recovery codes. You can put it off with Not now — it comes back at your next sign-in until you have created them (in Settings → Security, too).
Passkeys — sign in with your face or fingerprint
A passkey lets you sign in without a password: Face ID, Touch ID, Windows Hello, your Android phone’s screen lock, or a security key. It stays on your device or in your password manager (iCloud Keychain, Google Password Manager, 1Password) and cannot be phished like a password. Signing in with a passkey counts as 2-step verification — no code from the app needed.
-
Sign in (password and the code from your app).
-
Open Settings → Security and click Add a passkey.
-
Confirm with your face, fingerprint or device PIN.
-
Next time, type your email and choose Sign in with a passkey.
The authenticator app stays required — it protects signing in with your password, which still works.
Tip: A passkey saved in iCloud Keychain or Google Password Manager is on your other devices too. If you lose your phone, sign in with it from your computer and move the authenticator app to your new phone in Settings → Security — no need to contact us.
Lost the phone with the app
Have a passkey on another device? Sign in with it and choose Settings → Security → Move to a new phone.
No passkey? Use a recovery code. When you set up two-step verification, Sport Match gave you 10 one-time codes. On the login page enter your email and password, then at the code step choose “Lost your authenticator app? Use a recovery code” and type one code. Your old authenticator app stops working, every device is signed out, and you set up the app on your new phone straight away — then save your new set of codes (the old ones no longer work).
No codes either? Contact Sport Match support (the chat on this page, or email). We first confirm it is really you: with a message from your account’s email address and a call back to the phone number in your profile. Then we switch the code off and sign out every device, and after signing in with your password you set it up again on your new phone straight away.
Use passkeys? After recovering, remove the lost phone’s passkey in Settings → Security and choose “Use my passkeys again”. Moving to a new phone while the old one still works? No need to contact us: Settings → Security → Move to a new phone.
Signing in with a password
Use a password you don’t use anywhere else, ideally kept in a password manager, and never share it — not with coaches or colleagues either. Nobody from Sport Match will ever ask for your password or for a code from an email.
Signing in with Google or Facebook
If you sign in with Continue with Google or Continue with Facebook, Google or Facebook guards your sign-in — your Sport Match account is only as safe as that account. Turn on 2-step verification there:
Frequently asked questions
I sign in with Google — do I need to set anything up in Sport Match?
No — protect your Google (or Facebook) account with 2-step verification instead. The links are above.
Do I have to turn on 2-step verification?
Yes, if you own a club or coach in one and sign in with email and password. If you sign in with Google or Facebook — no; protect that account instead (links above).
The app says my code is wrong.
Make sure your phone sets its date and time automatically, then type the next code. Each code works only once.
Does a passkey replace the code from the app?
When you sign in with the passkey, yes. Signing in with your password still asks for the code.
Didn’t find an answer?
Write to us in the chat — it opens on this page, no login needed — or email contact@sportmatch.pl.