# Confirm destructive actions (/docs/getting-started/confirm-destructive-actions)

Actions that can't be undone, such as deleting a record, removing a member or disconnecting a channel, ask for a fresh code from your authenticator app before they run. Someone who gets hold of a signed-in browser still can't destroy anything without your phone.

- **Who can use it:** Anyone whose role allows the action. The code is always your own.
- **Before you start:** Your authenticator app, set up when you created your account (see [Create your account](/docs/getting-started/create-account)).

## Confirm with a code [#confirm-with-a-code]

<Steps>
<Step>

### Start the action [#start-the-action]

Choose the action as usual, for example **Delete** in a row's **⋯** menu. The confirmation dialog says what will happen.

</Step>
<Step>

### Type the code from your app [#type-the-code-from-your-app]

Type the 6-digit code your authenticator app shows for Mokanata into the code field in the dialog. Codes change every 30 seconds, so use the one on screen now.

</Step>
<Step>

### Confirm [#confirm]

Click the red button. Mokanata checks the code first: a wrong code shows under the field and nothing happens. With the right code, the action runs.

</Step>
</Steps>

Deleting a workspace or your account asks you to type its name or your email as well as the code.

## Which codes work [#which-codes-work]

Only a current code from your **authenticator app** confirms an action. Recovery codes and codes sent by email work for signing in, not here. If you don't have your authenticator app, sign in another way and [reset it](/docs/settings/security#reset-your-authenticator) first; resetting also asks for a code, so if your app is gone, contact the workspace owner or Mokanata support.

After 5 wrong codes in 5 minutes, Mokanata asks you to wait before trying again.

When a platform admin views your account to help you, their own authenticator confirms these actions, not yours.

## Troubleshooting [#troubleshooting]

<Accordions type="single">
<Accordion title="The code is rejected">

Check that the app shows the Mokanata entry for the account you're signed in to (you may have several accounts), that your phone's clock is set automatically, and type the newest code.

</Accordion>
<Accordion title="Some confirmations don't ask for a code">

Dialogs that only discard something on your screen, such as an unsaved draft, don't change anything in Mokanata, so they don't need a code.

</Accordion>
</Accordions>

## Next steps [#next-steps]

<Cards>
<Card title="Passkeys, authenticator and devices" href="/docs/settings/security" description="New recovery codes, resetting your authenticator and your passkeys." />
<Card title="Danger zone" href="/docs/settings/danger-zone" description="Leave a workspace, transfer ownership or delete your account." />
</Cards>