What if I lose the device that holds my passkey?

Sign in with a code from your email instead, then add a new passkey from Settings → Security. If your passkey syncs across your devices (through iCloud, Google, or a password manager), it is usually already available on the replacement device.

Someone used my session. What do I do?

Open Settings → Security and choose Revoke all others to sign out every other browser immediately. Then change your email password with your email provider, because that is what protects the sign-in codes idapt sends you. Two-factor authentication makes this recovery even stronger: the attacker's browser still cannot sign in without your authenticator app.

What if I lose my authenticator app?

Use one of the backup codes you saved when you set up two-factor authentication. Each code works once. Sign in, then regenerate your backup codes from Settings → Security and set up the authenticator again on a new device.

Secure your account

Q: Do I need a password?

No. idapt signs you in with a code sent to your email, never with a password. Anyone who knows only your email cannot get in; they also need the code that arrives in your inbox. For a faster way in, add a passkey.

Add a passkey for a faster, phishing-resistant sign-in, and review every device and session on your account. It all lives under Settings → Security🪪

Add a passkey

A passkey lets you sign in with Touch ID, Windows Hello, or a hardware security key instead of entering a sign-in code each time. Add one from Settings → Security → Passkeys and follow your browser's prompt. You can name, rename, and remove passkeys, and add more than one so you always have a backup.

Passkeys are convenient and phishing-resistant, because they only work on the real idapt site. Add a passkey on more than one device, or use one that syncs across your devices, in case you lose one.

idapt signs you in with a code sent to your email, never with a password. Anyone who knows only your email cannot get in; they also need the code that arrives in your inbox. Your email address lives under Settings → Security. For the steps to change it, see Account settings.

Review your browser sessions

Browser sessions lists every browser currently signed in to your account, with the current one marked. To sign out somewhere else, choose the trash icon next to that session, or use Revoke all others to sign out everywhere except where you are now.

Revoking a session takes effect immediately. Your current session is never affected when you revoke the others, so you stay signed in here.

See where your account is used

Devices shows the browsers where idapt has seen activity from your account, along with where each was last seen. It is a read-only overview, and a single device can hold several sessions over time. If you spot something you do not recognize, revoke its sessions and change your email if you suspect your inbox is compromised.

Add two-factor authentication

Two-factor authentication adds a second lock on your account: the sign-in code proves your email, and your authenticator app proves it is really you. On a new browser, sign-in then asks for a live code from your authenticator app, so a stolen mailbox alone cannot take over your account.

Open Settings → Security and find Two-factor authentication.
Choose Set up and scan the QR code with your authenticator app (Google Authenticator, 1Password, or any TOTP app). You can also type the secret shown under the QR code.
Enter the six-digit code from your app to confirm.
Save the backup codes that appear next. Each one lets you sign in once when you do not have your authenticator app.

The browser you set it up on is trusted automatically, so you will not be asked again there. On a new device, leave Trust this browser for 30 days checked if it is your own machine.

If you cannot generate a code, use a backup code instead. The challenge screen has a Use a backup code switch. If you lose both the authenticator and the codes, contact support to recover the account.

Accounts without two-factor authentication have a daily cap of $100 on both credit top-ups and spending. Enabling two-factor authentication removes the cap. It is a fraud guard: a hijacked mailbox cannot fund or drain an account that a stolen email cannot sign in to.

FAQs

Account settings

Change your email, manage how you sign in, and delete your account.

Your data and privacy

What idapt stores, who can see it, how AI providers handle it, and the controls that keep you in charge.

Up next

Your profile and avatar

Set your display name, username, and avatar, and control how you appear across idapt.

Was this helpful?

Add a passkey

Passkeys are convenient and phishing-resistant, because they only work on the real idapt site. Add a passkey on more than one device, or use one that syncs across your devices, in case you lose one.

Review your browser sessions

Revoking a session takes effect immediately. Your current session is never affected when you revoke the others, so you stay signed in here.

See where your account is used

Add two-factor authentication

Open Settings → Security and find Two-factor authentication.

Choose Set up and scan the QR code with your authenticator app (Google Authenticator, 1Password, or any TOTP app). You can also type the secret shown under the QR code.

Enter the six-digit code from your app to confirm.

Save the backup codes that appear next. Each one lets you sign in once when you do not have your authenticator app.

The browser you set it up on is trusted automatically, so you will not be asked again there. On a new device, leave Trust this browser for 30 days checked if it is your own machine.