Security & your account

Under Account → Security you can require up to five passwords, entered one after another, to sign in. A wrong password at any step starts the sequence over. Changing the sequence needs all your current passwords and signs out your other devices.

Robot check #

Sign-up and every sign-in step include a quick robot check that runs in your browser — no third-party tracking. It gets slower after failed attempts.

Several wrong passwords for your account within an hour trigger an email and a notification, with where the attempts came from and how far they got. Recent failed attempts are listed under Account → Security.

Sessions #

A sign-in lasts one month and then ends — it is never extended. Sign out of all devices ends every session immediately.

Support PIN #

Your account has a 6-digit support PIN under Account → Security. Nobody at support can see it. Staff can only sign in to your account to help you (or set a new password) when you read the PIN to them yourself. A support session lasts an hour, can't touch your passwords, payments or tokens, and you're emailed every time. The PIN changes after each use.

Your projects #

Each account's project code runs in its own sandbox. Previews are only visible to you and your team, and published sites are served separately from the app.

Resetting your password #

Forgot password? emails you a reset link. Resetting by email removes any extra sign-in passwords.