Sign-in and security

There are no passwords. You sign in with a passkey or a link by email, and you add a second step: a code from an authenticator app, or a physical security key. Owners and admins must have it on. All of it lives in Your account, Security.

Signing in

• With a passkey: your device's fingerprint, face or PIN. It's quicker than a link, and it can't be phished.
• With a link by email: it works once, for 15 minutes. It opens a page called "Finish signing in" with one button, Sign in, so an email scanner that opens links can't sign in for you.

Passkeys

The Passkeys card on Your account, Security lists yours. Add one with Add a passkey, and rename or remove each one there. Remove your last passkey and you sign in by email link.

2-step sign-in

2-step sign-in asks for a second step after every email-link sign-in. It's free. Use either, or both:

• An authenticator app: the 6-digit code from Google Authenticator, Microsoft Authenticator, 1Password, Authy or any other app that makes time-based codes (TOTP). The code changes every 30 seconds. No text messages.
• A security key, the strongest: a FIDO2 (WebAuthn) key that connects over USB, NFC or Lightning. It can't be phished.

Who needs it

• Owners and admins must turn it on. Until they do, they can see every page, but anything only an owner or admin can change asks them to turn on 2-step sign-in first.
• A passkey alone doesn't count, because an email link would still sign you in with one step.
• Viewers can turn it on too, and we recommend it.

Turning it on

On the 2-step sign-in card, turn the switch on and pick Authenticator app or Security key:

1. Add your app or your key. For an app, scan the QR code with it (or type the setup key it shows), then enter the 6-digit code it makes. For a key, insert it, or hold it near your phone, and touch it when it blinks.
2. Name it. A name tells your apps and keys apart.
3. Save your recovery codes. You get 10 one-time codes, shown only now and covered until you press Show codes (they cover again if you switch windows). Use Copy all or Download .txt, tick "I saved them somewhere safe", then Finish.

Once it's on

• Your apps and keys are listed together, with each one's name, when it was added and when it was last used. Rename or Remove each one.
• Add a backup. A second app or key is recommended: keep a key somewhere safe, away from the first.
• New recovery codes makes a fresh set of 10. Your old codes stop working at once.
• Removing your last app or key turns 2-step sign-in off, and your recovery codes stop working. Owners and admins can't: add another way first, or leave the role.
• Turning it off asks you to confirm it's you first. Your apps, keys and recovery codes are removed. Owners and admins keep it on.

Signing in with 2-step on

• After the email link, Sign in on "Finish signing in" leads to your second step. With an app: enter the 6-digit code it shows, and it signs you in at the sixth digit. With a key: choose Use security key, insert your key or hold it near your phone, and touch it.
• Have both? Use a security key instead, or Use your authenticator app instead, switches between them.
• A code works once. If it doesn't match, enter the one showing now: codes change every 30 seconds.
• A passkey counts as both steps. It's already a device plus your fingerprint, face or PIN.

If you lose your phone or a key

• Use your backup app or key, or choose Use a recovery code instead and enter one of your 10 codes. They look like k7q2m-9xd4p, and each works once.
• Then remove the lost one and add a new one in Your account, Security.

Confirming it's you again

If you signed in more than 10 minutes ago, these actions ask you to confirm it's you again:

• Connecting or disconnecting a payment processor
• Changing a price
• Going live
• Exporting your data
• Deleting your account
• Adding a team member

Confirm with Use my passkey. No passkey on this device? Choose Email me a link: it works for 15 minutes, and Use my passkey instead takes you back.

Security emails

The New sign-ins email is always on. It tells you about every passkey, authenticator app or security key added or removed, and every sign-in from a new device.

Sessions

• A session ends after 12 hours idle, and lasts 30 days at most.
• The Sessions card on Your account, Security lists where you're signed in. Sign out of any one, or of all the others at once.

Studios and team members

A studio holds your apps, sales, plan and team. You can be in more than one: the account menu at the bottom of the sidebar switches between them, and New studio makes another. Each studio has its own plan.

Teams are on the Studio plan: 3 people included, then $5 a month for each extra person. Starter and Pro are for one person. Each teammate signs in with their own email and passkey: no shared logins. An invitation's link works once, for 7 days. Removing someone signs them out everywhere at once; their past actions stay in the history.

What we protect for you

• Card numbers never reach us. Buyers pay on the processor's own checkout.
• Payment connection secrets are encrypted, and deleted at once when you disconnect.
• We never log a watch's device ID or an email. More on Your data and your buyers' data.