> For the complete documentation index, see [llms.txt](https://docs.basis.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.basis.pro/getting-started/onboarding.md).

# Onboarding (Email + MPC)

{% hint style="info" %}
Operator and jurisdiction: BASIS is operated by BASIS DIGITAL INFRASTRUCTURE LTD, a Seychelles IBC (LEI: [254900IX2F2KCWNSSS64](https://lei.bloomberg.com/leis/view/254900IX2F2KCWNSSS64)).
{% endhint %}

BASIS keeps onboarding fast without relaxing account security.

Instead of a username/password account, BASIS uses email code login with an MPC (Multi-Party Computation) model via Privy™.

{% stepper %}
{% step %}
**1) Create an account / sign in**

1. Enter your email address.
2. Retrieve the 6-digit verification code from your email inbox.
3. Enter the code to complete sign-in.

✅ The flow is the same for first-time sign-in and later sign-ins.\
✅ You do not create or store a password.
{% endstep %}

{% step %}
**2) What MPC means in practice**

Most accounts and wallets depend on one secret such as a password, private key, or seed phrase. If that secret is exposed, the account may be compromised.

MPC reduces that single-secret failure mode by:

* splitting sensitive authentication material into multiple encrypted shares
* storing those shares across independent security boundaries
* requiring multiple shares to reconstruct an authorization operation

**What this does not mean**

* MPC does not eliminate phishing risk
* MPC does not make you immune to malware
* MPC does not guarantee asset safety if an external service fails

MPC reduces one specific class of risk: single-secret compromise.

{% hint style="success" %}
This security model aligns with BASIS system design principles: deterministic execution, math-constrained operations, and state-machine risk controls.
{% endhint %}
{% endstep %}

{% step %}
**3) User security best practices**

Even with MPC:

* secure your email account with strong authentication
* secure your email account with a hardware security key (such as YubiKey) where your email provider supports it
* avoid unknown links and unsolicited messages
* avoid public Wi‑Fi for account access
* verify the BASIS domain every time
  {% endstep %}

{% step %}
**4) Troubleshooting login**

If you do not receive the 6-digit code:

* check your spam or junk folder
* wait a few minutes in case of delivery delay
* confirm you entered the email address correctly
* request a new code

If issues persist, contact <support@basis.pro>.
{% endstep %}
{% endstepper %}

{% hint style="warning" %}
Next step: read Wallet Model (Funding vs Staking) so you understand where native token deposits arrive, how stTokens are used, and how rewards accumulate in real time.
{% endhint %}