Every screen and control named on this page is checked against the product at build time. If a name here does not match your screen, your workspace is on an older release.

How your sign-in is protected

What the product does on every account, without anybody switching it on, and what you can add.

Steps

1. Sign-in is rate-limited and locks after repeated failures; every attempt, successful or not, is recorded with its device, location and address, and you can read your own record under Sign-in history.
2. A session is tied to a device. Each is listed under Sessions and can be ended from there; sessions also expire on their own after inactivity (Your session has expired. Sign in again to continue.).
3. Two-factor authentication is yours to turn on under Two-factor authentication: a code from an authenticator app, or a one-time code by email, with recovery codes for a lost phone.
4. Your workspace is its own database, reached only at its own address. Every action is checked against your permissions on the server; a screen that is hidden from you is also refused to you.
5. Cards are entered into the payment provider’s own fields. SISC keeps only the brand and the last four digits.

Related

• Turn on two-factor authentication
• See where you are signed in
• Help somebody who cannot sign in