Two-factor authentication
Use an authenticator app, with one-time recovery codes if you lose your phone.
Here is how accounts, documents and email are protected — described as it actually works, without badges we haven’t earned.
Use an authenticator app, with one-time recovery codes if you lose your phone.
Changing the team, billing or security settings, or deleting a license, asks for a fresh code — a stolen session alone is not enough.
Eight wrong passwords or codes lock the account for fifteen minutes, and every attempt is recorded.
Use your Google account instead of a password — two-factor still applies if you have turned it on.
Changing your password signs out every other device. Removing a team member ends their access at once.
At least eight characters, with a strength meter that flags common or easily guessed ones. Password reset links work once, for one hour.
Every request is checked against your workspace, and automated tests check that code can’t reach another customer’s data.
Files are stored privately and only ever opened through links that expire within minutes.
The activity log shows who added, changed, renewed or removed what. It can be added to, never edited.
A new workspace sends nothing until its owner confirms their email — nobody can sign up as you and have reminders sent in your name.
Each workspace has a daily email allowance far above any real day’s renewals, so the service can’t be used to send bulk mail.
A reminder that can’t be delivered is retried, then flagged to our team.
Being clear about the limits is part of being trustworthy.
Try everything free for 7 days. No card needed.
Then $39 a month, or $390 a year. Cancel whenever.