Passkeys, devices and security
Keep your Atlas account yours: a passkey instead of a password, the devices that may sign in, and what to do when something looks wrong.
Account, Security
| Part | What it is |
|---|---|
| Password | Change it with your current one. Choose at least 8 characters; a strength meter grades it. |
| Email verification | Shows whether your address is confirmed and resends the link. |
| Active sessions | Every device signed in to your account. Sign one out, or Sign out of all other devices. |
| Trusted devices | Devices that skip the emailed sign-in link. Trust the one you are on, or untrust any; an untrusted device is verified again at its next sign-in. |
| Passkeys | Sign in with your fingerprint, face or a security key instead of a password. |
Passkeys
A passkey is stored on your device and cannot be typed into a fake page or stolen from a database, so it is the strongest way to sign in. After you sign in, Atlas offers to add one: always after you register, then up to three more times, two weeks apart. Add one from Security any time, and remove one there too. A passkey sign-in counts as verified, so it skips the emailed link.
Adding or removing a passkey needs a sign-in from the last 10 minutes, or your password, so a stolen open tab cannot swap them.
If something looks wrong
- Change your password and sign out of all other devices.
- Check Trusted devices and untrust any you do not recognize.
- Rotate the API key of any application whose key may have leaked: Settings, SDK and key.
- Tell us through Support or at the security address on the Security page, which also explains how to report a vulnerability.
Delete your account
Delete account in Security emails you a link to confirm. After that a 7-day grace period starts and you can cancel any time before it ends. When it ends, recurring billing is cancelled and your personal data is deleted; records the law requires, such as invoices, stay. An account with staff duties, or with an unpaid referral balance, cannot be deleted until that is settled.