Your account and recovery
Last updated
You sign in with your username and password, on our website and over Tor alike. Everything below is on your account page.
Password
12 to 128 characters, not your username and not one of the most common passwords. A password manager helps. After a wrong password, the next try waits a little longer each time.
Two-factor codes and passkeys
Two-factor codes (TOTP) from an authenticator app make a stolen password useless on its own. Passkeys sign you in without a password on our website; Tor Browser turns them off, so over Tor you use your password.
Recovery codes
You got 10 recovery codes when you signed up. Each signs you in once, without the password or the two-factor code, and then asks for a new password. Keep them somewhere safe, apart from your password. You can make new ones (which ends the old ones) on your account page.
Without your password, a recovery code or a passkey, we can’t give you your account back: we don’t know who you are, and an email address alone doesn’t prove it. That is also why there is no support for accounts nobody can sign in to.
Email address
An address is optional. With one, you get our notices by email too; without, they are only in your inbox in the app.
Your data
Your account page downloads everything we store about you, and deletes your account.
Over Tor
Still stuck? Open a support ticket and we’ll help you in the app.