Expensify · NikkiWines · Jul 24, 2026 · Jul 22, 2026 · Jul 22, 2026
@@ -17,7 +17,7 @@ Once you've claimed and verified a domain, you can:
 
 To claim a private domain, you must:
 - Be logged in with an email address from that domain
-- Have verified your contact method with a magic code
+- Have verified your contact method with a security code
 
 1. From the left-hand menu, select **Workspaces**, then select the **Domains** tab.
 2. Click **New domain**.
@@ -41,7 +41,7 @@ Each domain is listed in its own row, showing:
 Depending on your email setup:
 
 - **If you're not using an email from that domain**: You'll see an error. You can't claim domains that don't match your email address.
-- **If your email is from that domain but not verified**: You’ll be prompted to verify your login using a magic code.
+- **If your email is from that domain but not verified**: You’ll be prompted to verify your login using a security code.
 - **If the domain is already claimed**: You’ll need to coordinate with an existing admin to request that your role be updated to Domain Admin.
 
 After the domain is successfully claimed, the domain will appear on the **Domains** tab in the **Not verified** state.

@@ -65,7 +65,7 @@ You'll be prompted to enable biometric authentication the first time you approve
 
 To enable biometrics:
 
-1. Enter the verification code sent to your email (magic code).
+1. Enter the verification code sent to your email (security code).
 2. Follow the on-screen prompts.
 3. Confirm using:
    - Face ID

@@ -104,7 +104,7 @@ A virtual card is a secure, flexible way to manage online spending:
 2. Click your Expensify Card.
 3. Click **Reveal** to view the card number, expiration date, CVV, and billing address.
 
-If any of your personal details are missing, you'll be prompted to add them before your card details can be revealed. Click **Add details**, then enter your legal name, date of birth, address, and phone number. After you confirm these details, authenticate to reveal your card. US cardholders confirm with a magic code sent to their email, while UK and EU cardholders confirm with biometrics or a passkey.
+If any of your personal details are missing, you'll be prompted to add them before your card details can be revealed. Click **Add details**, then enter your legal name, date of birth, address, and phone number. After you confirm these details, authenticate to reveal your card. US cardholders confirm with a security code sent to their email, while UK and EU cardholders confirm with biometrics or a passkey.
 
 ---
 

@@ -20,7 +20,7 @@ The name on your Expensify Card is pulled from the legal name in your profile. T
 3. Under **Private**, select **Legal name**.
 4. Update your **Legal first name** and **Legal last name**. 
 5. Click **Save**.
-6. Enter the magic code sent to your email or phone to verify the change.
+6. Enter the security code sent to your email or phone to verify the change.
 
 Your updated legal name will apply to your Expensify Card. To get a new physical card with the updated name embossed on it, [request a replacement card](/articles/new-expensify/expensify-card/How-to-Request-a-New-Expensify-Card).
 
@@ -34,7 +34,7 @@ The phone number linked to your Expensify Card is used for 3D Secure (Verified b
 2. Select **Profile**.
 3. Under **Private**, select **Phone number**.
 4. Enter your updated phone number and click **Save**.
-5. Enter the magic code sent to your email or phone to verify the change.
+5. Enter the security code sent to your email or phone to verify the change.
 
 After updating, your new phone number will be used for future 3D Secure SMS verification codes.
 

@@ -1,7 +1,7 @@
 ---
 title: Account Settings
 description: Learn how to update your profile settings, preferences, and notifications in Expensify.
-keywords: [New Expensify, profile, account preferences, notifications, language, theme, high contrast mode, timezone, personal information, phone number, magic code]
+keywords: [New Expensify, profile, account preferences, notifications, language, theme, high contrast mode, timezone, personal information, phone number, security code]
 ---
 
 Expensify allows you to personalize your experience by customizing your profile, preferences, and notifications. This guide shows you how to update your photo, language, timezone, notification settings, and more—all from the left-hand navigation menu.
@@ -124,7 +124,7 @@ To update your legal name, date of birth, phone number, or address:
 3. Click **Legal Name**, **Date of Birth**, **Phone Number**, or **Address**.
 4. Enter the updated information.
 5. Click **Save**.
-6. Enter the magic code sent to your email or phone to verify the changes.
+6. Enter the security code sent to your email or phone to verify the changes.
 
 When typing in the **Address line 1** field, a list of address suggestions appears. Select a suggestion to auto-populate the address fields including city, state, ZIP code, and country.
 
@@ -140,7 +140,7 @@ To edit your legal name:
 1. Go to **Account > Profile**.
 2. Scroll to **Private** and click **Legal Name**.
 3. Enter the updated information and click **Save**.
-4. Enter the magic code sent to you to verify the change.
+4. Enter the security code sent to you to verify the change.
 
 ---
 

@@ -1,32 +1,32 @@
 ---
 title: Avoiding common scams
-description: Learn how to recognize and avoid common phishing scams that pretend to be from Expensify, including fake phone calls and emails asking for your Magic Code.
-keywords: [Expensify scam, phishing, Magic Code, security, login code, avoid fraud, suspicious email, fake call, fraud prevention]
-internalScope: Audience is all Expensify members. Covers identifying and responding to scams involving Magic Codes. Does not cover account recovery or dispute workflows.
+description: Learn how to recognize and avoid common phishing scams that pretend to be from Expensify, including fake phone calls and emails asking for your security code.
+keywords: [Expensify scam, phishing, security code, security, login code, avoid fraud, suspicious email, fake call, fraud prevention]
+internalScope: Audience is all Expensify members. Covers identifying and responding to scams involving security codes. Does not cover account recovery or dispute workflows.
 ---
 
 
 # Avoiding common scams
 
-Some scammers try to impersonate Expensify by sending fake emails or calling you directly, often asking for your **Magic Code** (your login code). These scams are designed to trick you into giving up access to your Expensify account.
+Some scammers try to impersonate Expensify by sending fake emails or calling you directly, often asking for your **security code** (your login code). These scams are designed to trick you into giving up access to your Expensify account.
 
 This article explains how these scams work, how to recognize them, and what actions to take.
 
 **Note:**  Expensify will never call you asking for login codes, passwords, or payment information. If you receive such a call, it's a scam.
 
 ---
 
-## What is the Magic Code?
+## What is the security code?
 
-The **Magic Code** is a one-time login code Expensify emails or texts to you when you sign in without a password. It should only be used by **you** during login.
+The **security code** is a one-time login code Expensify emails or texts to you when you sign in without a password. It should only be used by **you** during login.
 
-**Expensify will never call, email, or message you to ask for your Magic Code.**
+**Expensify will never call, email, or message you to ask for your security code.**
 
 ---
 
 ## How to recognize phone call scams pretending to be Expensify
 
-- The scammer claims to be from Expensify and needs your Magic Code to verify your account.
+- The scammer claims to be from Expensify and needs your security code to verify your account.
 - They may spoof a legitimate phone number to make it seem more convincing.
 - Some scammers may create a sense of urgency (e.g., “We detected suspicious activity on your account.”)
 
@@ -37,16 +37,16 @@ The **Magic Code** is a one-time login code Expensify emails or texts to you whe
 ## How to recognize phishing emails or texts pretending to be Expensify
 
 - Emails and text messages often look like they’re from Expensify or Visa, but the sender address is likely not from an expensify.com email address.
-- These emails and text messages may have links that lead to a fake login page, prompt you to reset your password, or ask you to reply with your Magic Code.
+- These emails and text messages may have links that lead to a fake login page, prompt you to reset your password, or ask you to reply with your security code.
 - Scammers sometimes use urgent language like “Your account will be closed if you don’t respond.”
 
-**Don’t click suspicious links, and never share your Magic Code in email. Expensify will only generate a magic code for you when you take an action in the app, such as logging in or making a high-risk change.**
+**Don’t click suspicious links, and never share your security code in email. Expensify will only generate a security code for you when you take an action in the app, such as logging in or making a high-risk change.**
 
 ---
 
 ## How to protect your Expensify account
 
-- **Never share your Magic Code** — not over the phone, not by email, not via text.
+- **Never share your security code** — not over the phone, not by email, not via text.
 - **Don’t click suspicious links** — always verify the sender’s email address.
 - **Use two-factor authentication (2FA)** - this adds an extra layer of security to your account. 
 - **If in doubt, message Concierge**  - reach out directly from within the Expensify app.
@@ -55,23 +55,23 @@ The **Magic Code** is a one-time login code Expensify emails or texts to you whe
 
 ---
 
-## What to do if you receive a Magic Code you didn't request
+## What to do if you receive a security code you didn't request
 
-If you receive a Magic Code email but didn’t try to log in, this does not necessarily mean your account has been compromised. It can happen for a variety of reasons, such as someone mistyping an email address. 
+If you receive a security code email but didn’t try to log in, this does not necessarily mean your account has been compromised. It can happen for a variety of reasons, such as someone mistyping an email address. 
 
 Here's what to do:
 
 1. **Do not share the code with anyone** — simply ignore or delete the email.
 2. **Do not click any links** in the email. 
 3. **Consider enabling [two-factor authentication](https://help.expensify.com/articles/new-expensify/settings/Two-Factor-Authentication)** for extra account security.
 
-**Note:** You do not need to lock your account just because you received an unexpected Magic Code. Only lock your account if you believe someone has gained access to your email account or if you shared your Magic Code with someone.
+**Note:** You do not need to lock your account just because you received an unexpected security code. Only lock your account if you believe someone has gained access to your email account or if you shared your security code with someone.
 
 ---
 
-## What to do if you shared your Magic Code
+## What to do if you shared your security code
 
-If you accidentally gave someone your Magic Code, act fast to: 
+If you accidentally gave someone your security code, act fast to: 
 
 1. **[Lock your Expensify account](/articles/expensify-classic/settings/Report-Suspicious-Activity)** immediately to block unauthorized access.
 2. **Contact Concierge** from a safe device and explain the situation.
@@ -95,17 +95,17 @@ If you believe your account has been targeted or compromised:
 
 # FAQ
 
-## Why does Expensify use Magic Codes for login?
+## Why does Expensify use security codes for login?
 
-Expensify uses Magic Codes instead of passwords to simplify login while keeping your account secure. These codes are valid for one-time use and expire quickly.
+Expensify uses security codes instead of passwords to simplify login while keeping your account secure. These codes are valid for one-time use and expire quickly.
 
 ## How do I know if an email is really from Expensify?
 
 Legitimate Expensify emails always come from an address ending in **@expensify.com** or **@team.expensify.com**. If you’re unsure, don’t click any links — just log into the Expensify app directly and message Concierge.
 
-## I received a Magic Code I didn't request. Is my account compromised?
+## I received a security code I didn't request. Is my account compromised?
 
-No. Receiving an unrequested Magic Code does not mean your account is compromised. It most likely means someone entered your email address by mistake when trying to log in. As long as you don't share the code with anyone, your account is safe. You can simply ignore or delete the email. If you want extra protection, enable [two-factor authentication](/articles/new-expensify/settings/Two-Factor-Authentication).
+No. Receiving a security code you didn't request does not mean your account is compromised. It most likely means someone entered your email address by mistake when trying to log in. As long as you don't share the code with anyone, your account is safe. You can simply ignore or delete the email. If you want extra protection, enable [two-factor authentication](/articles/new-expensify/settings/Two-Factor-Authentication).
 
 ## Can Expensify call me?
 

@@ -1,7 +1,7 @@
 ---
 title: Login Troubleshooting
-description: Troubleshoot common login issues — like missing Magic Codes, 2FA lockouts, SSO problems, or blocked emails — and find out who to contact to get back in fast.
-keywords: [New Expensify, Expensify login, can't log in, login help, Magic Code missing, Two-Factor Authentication, SSO login, email domain blocked, login error, Concierge login support, account access issue, locked out, change password, update password, reset password, forgot password, password reset, new password, password change]
+description: Troubleshoot common login issues — like missing security codes, 2FA lockouts, SSO problems, or blocked emails — and find out who to contact to get back in fast.
+keywords: [New Expensify, Expensify login, can't log in, login help, security code missing, Two-Factor Authentication, SSO login, email domain blocked, login error, Concierge login support, account access issue, locked out, change password, update password, reset password, forgot password, password reset, new password, password change]
 ---
 
 # Login troubleshooting
@@ -10,24 +10,24 @@ If you're not able to log into your Expensify account, find your situation below
 
 ---
 
-## Can't receive Magic Code login email
+## Can't receive security code login email
 
-A Magic Code is a one-time login code that Expensify emails you when you try to sign in instead of asking for a password. If you’re not getting the email, your email provider might be blocking or filtering it.
+A security code is a one-time login code that Expensify emails you when you try to sign in instead of asking for a password. If you’re not getting the email, your email provider might be blocking or filtering it.
 
 **Common Cause**
 Your email provider is blocking or filtering messages from Expensify. 
 
 **What you can try**
 - Wait up to **10 minutes** for the email to arrive — delivery can be delayed.
 - Check your **spam**, **junk**, and **trash** folders.
-- Search for **Expensify Magic Code** or concierge@expensify.com.
+- Search for **Expensify security code** or concierge@expensify.com.
 - Add concierge@expensify.com to your email contacts.
-- Click **Didn't receive a magic code?** on the login screen to request the code be sent again. 
+- Click **Didn't receive a security code?** on the login screen to request the code be sent again. 
 - Wait **2–3 minutes** between resend attempts. If you request a new code while one is still being generated, the older one won't work. 
 
 **What won’t help**
 - Clicking "Resend" repeatedly without checking your filters.
-- Logging in with a phone number or backup email. The Magic Code is always sent to the primary login set on the account - not any secondary contact methods. 
+- Logging in with a phone number or backup email. The security code is always sent to the primary login set on the account - not any secondary contact methods. 
 
 **Who to contact**
 - **Using a work email?** Ask your IT team to [allowlist Expensify emails](https://help.expensify.com/articles/expensify-classic/email/How-to-Allowlist-Expensify).
@@ -39,7 +39,7 @@ Your email provider is blocking or filtering messages from Expensify.
 
 ## Locked out by Two-Factor Authentication (2FA) 
 
-Two-factor authentication (2FA) is a feature that adds an extra layer of security to your account, and can be enabled by you on your account or required by a Domain Admin. After entering your Magic Code, you’ll be prompted to enter another code — this one comes from your authenticator app.
+Two-factor authentication (2FA) is a feature that adds an extra layer of security to your account, and can be enabled by you on your account or required by a Domain Admin. After entering your security code, you’ll be prompted to enter another code — this one comes from your authenticator app.
 
 **Common Cause**
 Two-Factor Authentication (2FA) is enabled on your account, but you no longer have access to your authenticator app or recovery codes.
@@ -69,7 +69,7 @@ If your company uses SAML SSO, you'll be redirected to your company's Identity P
 Your company's SAML SSO configuration may have an issue affecting your account or domain
 
 **What you can try**
-- If you see the option "Would you like to sign in with a magic code or Single Sign-On?", choose **Magic Code** to log in with a code instead. 
+- If you see the option "Would you like to sign in with a security code or Single Sign-On?", choose **Use security code** to log in with a code instead. 
 - Double-check your credentials to ensure you are inputting the right details into your Identity Provider login screen. 
 - Log in to another app you access using the same Identity Provider login and see if you experience the same error.
 

@@ -29,7 +29,7 @@ If you have multiple Expensify accounts, you can merge them into a single login.
 4. Enter the **email address or phone number** for the account you want to merge into this one.
 5. Check the box that says **"Yes, I understand this is not reversible"**.
 6. Click **Merge Accounts**.
-7. Check your email for the magic code sent by Expensify.
+7. Check your email for the security code sent by Expensify.
 8. Enter the code into the prompt and click **Merge**.
 
 ---

@@ -34,7 +34,7 @@ Anyone can enable Two-Factor Authentication on their own account. Domain Admins
 # What to expect when logging in
 
 After setup, login requires both:
-1. Your magic code (sent via email).  
+1. Your security code (sent via email).  
 2. The 6-digit verification code from your authenticator app.
 
 ---