Account security

Your KeepSafe account protects every key you store, so it is worth a few minutes to secure it well.

Your password

Passwords must be long enough to resist guessing. If you sign in with GitHub or Google, you can still add a password later.

Two-step sign-in

Two-step sign-in asks for a code from an authenticator app as well as your password.

1. Open Settings → Security and choose to turn on two-step sign-in.
2. Scan the QR code with your authenticator app.
3. Enter the code it shows to confirm.
4. Save your backup codes somewhere safe. Each one works once, if you ever lose your phone.

Passkeys

A passkey lets you sign in with your device’s fingerprint, face or screen lock instead of a password. Add one from Settings → Security. You can register several, one for each device.

Sessions

Settings → Security lists every device signed in to your account. End any session you do not recognise, or sign out everywhere at once. Sessions also end on their own after a period of inactivity.

Activity

Your activity history records sign-ins, changes to security settings and every reveal of a secret, each with the device and the country it came from. If something looks unfamiliar, change your password and end your other sessions.

Alerts about your account

If your account is signed in to from a new country, KeepSafe raises an alert. Keep push notifications on so you hear about it quickly.