Sign in to LuckyPari

We support four authentication paths because no single one works for every player on every device. The default is the boring one — email and password — and it works exactly as you'd expect, with one quiet improvement: we use Argon2id for password hashing.

On the mobile apps we add biometric login via Face ID, Touch ID or Optic ID on Apple, and fingerprint or face on Android. Credentials are stored in the platform's secure enclave.

For everyone who hates passwords, we support magic-link login: enter your email, we send a one-time link, you tap it, you're in.

• Email + Argon2id-hashed password
• Biometric on iOS / Android via secure enclave
• Magic-link sign-in, single-use, 10-minute expiry
• Recovery passphrase issued at registration

We strongly encourage 2FA on every LuckyPari account — TOTP via any authenticator app, or hardware-key support via WebAuthn. 2FA is mandatory for accounts with lifetime deposits over €10,000. We do not support SMS-based 2FA.

Behind the scenes, every login attempt is run through a device fingerprinting and risk scoring system that flags unfamiliar devices, unusual geographies, impossible-travel scenarios.

Finally, we ship a feature we call 'panic logout' — a single button that terminates every session across every device.

• TOTP-based 2FA + WebAuthn hardware key support
• No SMS 2FA — SIM-swap risk too high
• Device fingerprinting with public audit log
• Panic logout — terminates every session in one tap

The standard 'forgot password' flow sends a single-use reset link to your registered email, valid for 30 minutes.

If you've lost access to your email as well, the recovery passphrase issued at registration becomes the next line of defence.

If you've also lost the recovery passphrase, the final option is a manual identity verification with our recovery team at [email protected]. We'll have your account back within 24 hours on weekdays.

• Forgot-password reset link — single-use, 30-minute expiry
• Recovery passphrase as second-line backup
• Manual recovery via [email protected] — usually under 24h
• Wallet is read-only-locked during recovery; funds stay safe