Browser account

You sign in with an email and a password; the service keeps a password check, which is not the password. The profiles stay on your disk and open with your password. We hold a copy only of a profile you put in the cloud or share with a team, and the key to that copy too.

Between launches

The browser remembers the sign-in rather than asking for the password at every launch, the restart after an update included. The password stays on the machine in the operating system’s protected storage, bound to the Windows user account. The remembered sign-in lasts thirty days of disuse: every launch that uses it starts the count again, and after thirty days without one the password is forgotten and asked for again.

Lock, sign out, reset, recover

Lock

Closes every open profile, and nothing on this disk is readable until the password is given again. The remembered sign-in stays.

Sign out

Detaches this machine from your account and destroys the remembered password. The profiles stay on this disk and still open with your password; signing in again reattaches the machine. Nothing is deleted.

Password reset

A forgotten password is reset from a link sent to your mailbox; the sign-in screen offers one under “Forgotten your password?”. A reset signs you in to the service and opens no profile.

Recovery key

What opens the profiles when the password is forgotten. The key is enrolled and changed in the application; a restore with it is still done from the command line.

What the account knows

Sign-in

The sign-in email and a password check, which is not the password.

The recovery key

Held by us, so that a forgotten password is not the end of your profiles.

Mail

The address confirmation and the key notice are sent through an outside mail service, which sees the address and the link.

The sign-in log

The account service keeps a sign-in log of the same kind as the site’s.

The profiles

On your disk. The licence decides what you get from the network, not whether your disk opens.

What we keep