The member's guide

What you need

• Your Discord account. You sign in to Phoenix with it, so there is no new password to remember.
• An authenticator app on your phone. Google Authenticator, Microsoft Authenticator, Authy, 1Password or the one you already use; they are free. Every Phoenix account has two-factor, so a stolen Discord login is never enough to get into yours.
• A wallet. MetaMask, Rabby, Coinbase Wallet or another browser wallet for Ethereum and the chains like it (Base, Polygon, Arbitrum and the rest); Phantom, Solflare or Backpack for Solana. On a phone, the wallet's own app.
• Nothing else. Linking with a signed message costs nothing: no gas, no fee, no transaction.

Sign in with Discord

1. Open Phoenix

   Go to Phoenix's front page and press Sign in with Discord.

2. Check what Discord asks

   Discord shows a page asking whether Phoenix may know who you are and which servers you are in. That is all it asks for. Press Authorize.

3. The second step: your code

   Discord sends you back to Phoenix, which asks for the six-digit code from your authenticator app. The very first time it shows Set up two-factor instead: see Two-factor below. You have ten minutes for this step; after that, sign in with Discord again.

4. Land on your dashboard

   Your Phoenix dashboard opens, with your Discord name at the top. Its panels: Your wallets, Cold wallets, Two-factor, Passkeys, Your Phoenix servers (servers you are in that use Phoenix), Your servers (any you own or manage), Discord Linked Roles and Your account.

You stay signed in on that browser for up to twelve hours, or until you have been away for two. After that, sign in again the same way: Discord, then your code.

Two-factor

Every Phoenix account has two-factor, for everyone, with no switch to turn it off. Signing in takes your Discord login and a code from an authenticator app on your phone, so someone who steals one of them still cannot get in.

1. Get an authenticator app

   Google Authenticator, Microsoft Authenticator, Authy, 1Password, or the one you already use.

2. Add Phoenix to it

   The first time you sign in, Phoenix shows Set up two-factor with a QR code. In your app press + (or Add) and scan it. On the same phone, press On this phone? Open in my authenticator app instead, or choose "enter a setup key" in the app and type the key Phoenix shows (Copy copies it).

3. Type the code it shows

   Type the six digits your app shows for Phoenix and press Turn on two-factor. Codes change every 30 seconds.

4. Save your recovery codes

   Phoenix shows ten recovery codes, once. Press Download or Copy all and keep them somewhere safe and offline, like a password manager or on paper. Tick the box and press Open my dashboard.

From then on, every sign in asks for the current code from your app. Each code works once.

A passkey instead of typing the code. On your dashboard, Passkeys, press Add a passkey, type a code from your app, and let your phone or computer make one (Face ID, a fingerprint, Windows Hello or a security key). At the next sign in, press Use a passkey instead. You can add up to five; your authenticator stays as the backup, and removing a passkey takes a current code.

Lost your phone?

At the code step, press Lost your phone? Use a recovery code and type one of your recovery codes. Each one works once. Then set up your new phone (below).

New recovery codes

On your dashboard, Two-factor, New recovery codes: type a code from your app, and Phoenix shows ten new ones. The old ones stop working. Do this when you are running low; the panel says how many are left.

Move to a new authenticator

A new phone or a new app: Two-factor, Move to a new authenticator. Type a code from your current app (or a recovery code if the old phone is gone), add Phoenix to the new app, and type its code. Phoenix then signs you out on every other device and gives you new recovery codes.

Lost the phone and every code?

Ask Phoenix's admins in your server. They can reset your two-factor once they are sure it is you, and your next sign in sets it up again.

Link a wallet

Under Your wallets, press Link an EVM wallet (Ethereum, Base, Polygon and the other chains like them) or Link a Solana wallet. A panel opens with four steps, and Phoenix ticks each one off as it goes.

1. Proving this browser is not a bot farm

   Your browser solves a short puzzle on its own. You do nothing but wait a moment; when it is done, the step says how many tries it took.

2. Connect your wallet

   Phoenix lists the wallets it finds in your browser. Pick yours, and your wallet asks whether to connect to this site. Say yes. Every EVM chain shares one address, so one link covers all of them.

3. Sign the message

   Your wallet shows a short message from Phoenix naming this site, your wallet and your Discord account. Read it, then sign. It is not a transaction. If your wallet ever asks you to approve spending, send funds or pay gas at this step, stop: that is not Phoenix.

4. Linked

   The wallet appears under Your wallets, shortened, with its chain and the day you linked it. Press Copy beside it to copy the full address.

Link every wallet that holds what your servers ask for, up to ten. A link stays until you unlink it.

Rather not connect your wallet?

Two more buttons under Your wallets prove an EVM wallet without connecting it to any site. Your server may accept only some of them.

• Prove with a send to itself. Pick the chain and type the wallet's address. Phoenix names an exact tiny amount. In your wallet, send exactly that from the wallet to the same address, then paste the transaction's hash and press Check the transaction. Only the chain's small fee is spent; the coins stay in your wallet. Never send to any other address.
• Prove with your OpenSea bio. Type the wallet's address. Phoenix gives you a code. Go to your own OpenSea profile yourself (Phoenix never sends you a link for it), put the code anywhere in your bio, save, and press Check my bio. You can take the code out afterwards.

Cold wallets

Keep your NFTs in a vault that never signs anything: on delegate.xyz, delegate it to a wallet you linked here, and what it holds counts as yours. Under Cold wallets, Find my cold wallets shows the ones Phoenix sees. Stop counting them turns that off for you.

Linking from your phone

On a phone, your wallet usually lives in its own app, and a normal phone browser cannot reach it. The wallet's app has a browser built in, and that is where you link.

1. Start the link as usual

   Press one of the link buttons. If Phoenix finds no wallet in the browser you are using, the second step says so and offers Open in MetaMask (for Ethereum, Base and Polygon) and Open in Phantom.

2. Open Phoenix in your wallet's app

   Tap the button for your wallet. Your phone opens the wallet's app on Phoenix's page. If you use another wallet app, open its built in browser and go to Phoenix's address yourself.

3. Sign in with Discord again

   The wallet's browser is a separate browser, so sign in with Discord once more inside it, and type your authenticator code. Then link as described above.

The dashboard fits a phone held upright or sideways. You can also add Phoenix to your home screen from your browser's share menu; it has its own icon.

Unlinking

Press Unlink beside a wallet and confirm. It leaves your account at once. A role that wallet earned you leaves after the next two checks, unless another of your linked wallets still qualifies.

Your data, in your hands

Your Phoenix account is your Discord account, locked with your authenticator. The Your account panel on your dashboard has three buttons:

Download my data

Saves a file called phoenix-my-data.json with everything Phoenix holds on you: your Discord name and id, your wallets, whether two-factor is on and how many recovery codes are left, your passkeys' names and dates, whether Linked Roles is on, and your account's history. It names nobody else, and it never holds your authenticator's key or your codes.

Sign out everywhere

Ends your Phoenix sign in on every phone and computer at once, this one included. Use it if you signed in on a device that is not yours.

Delete my Phoenix account

Removes your account, every wallet link, and your id from Phoenix's history. To be sure, Phoenix asks you to type DELETE first. If you sign in again later, you start fresh.

Verifying in your server Built

This works in a server once its managers and Phoenix's owners have switched it on. Until then, Verify says "Verification is not switched on in this server yet". Everything Phoenix says to you in Discord is private.

1. Find the verify channel

   Servers that use Phoenix have a channel with a message from Phoenix and two buttons, Verify and Check my roles.

2. Prove you are a person

   Press Verify. Phoenix shows a picture of five letters and digits, drawn fresh for every try. Press Type the letters, type them in the box, and send. Three wrong answers wait a minute. A server can also ask for a Discord account of a certain age; a newer one is asked to come back later.

3. Link if you have not

   Phoenix gives you a Link a wallet button to your dashboard, to sign in and link a wallet as above.

4. Get your roles

   Back in Discord, press Check my roles. Phoenix reads what your linked wallets hold and gives you the roles your server's rules say you have earned. You can also press Check my roles beside the server under Your Phoenix servers on your dashboard.

After that Phoenix keeps checking on its own, every few hours and whenever you link, move or unlink a wallet. A role leaves only after two checks in a row say it is no longer earned, and never because a chain did not answer. Typing /phoenix in a server where Phoenix's bot is installed gets you a private reply with a link to Phoenix.

Linked Roles

Some servers use Discord's own Linked Roles instead: the role's requirements name Phoenix, and you find it under the server's name, Linked Roles. Connecting there, or with Connect to Discord under Discord Linked Roles on your dashboard, lets Discord see three things from Phoenix: whether you are verified (two-factor and a linked wallet), how many wallets you linked, and how long you have had a Phoenix account. Disconnect turns it off.

Five rules

• Check the address bar. Today Phoenix lives at phoenixcheck.net/phoenix/. The message you sign names the site too, and your wallet can warn you when they do not match.
• Phoenix does not send direct messages asking you to verify. Start from your server or from Phoenix's own front page.
• Read before you sign. The message should name your Discord account and say it is not a transaction. A send to itself goes to the same address it comes from, never anywhere else.
• Never give anyone your six-digit code or a recovery code. You type them only on Phoenix's own sign in page. Phoenix's admins never ask for them.
• Use Sign out everywhere if you ever signed in on a shared device.

The security chapter explains how Phoenix keeps your data sealed and bots out.

Troubleshooting