Sign-In and Security: Passkeys, Authenticator, Sessions, and Login Alerts

Settings → Security → Sign in has four tabs: Ways to sign in, Active sessions, Login alerts and Login history.

Ways to Sign In

Kabora is passwordless. Every account has the verification code, which proves an address. You can also set up:

• Passkey: Your device's own lock.
• Authenticator app: An app that generates codes.
• Google or Apple: A linked account.
• Password: Any account can set a password on the Password row. Create it, then Change or Remove it. A correct password is a complete sign-in.

Kabora refuses a password that has appeared in a data breach elsewhere, and says so, without sending the password anywhere.

The Sign-In Method Kabora Requests

Sign in with, at the top, is the one way Kabora requests: the verification code, until you press Use this beside another. One proof completes the sign-in, and the verification code is always one press away.

The Authenticator App

Under Two-step verification, Turn on displays a code to scan. Once on, it is one of your ways to sign in. To have Kabora request it first, press Use this beside it under Sign in with.

Keep its backup codes safe; each works once in place of the app's code. The authenticator is per person, not per business. The Kabora app requests it under Enter your code, and accepts a backup code the same way.

Sessions and Login Alerts

• Active sessions: Every signed-in device and when it was last seen; end any in one press.
• Login history: Every sign-in, in your business's time zone.
• Login alerts: An email when a new device signs in, and a text too if you give a number. Turning one off, changing the number or adding an address asks you to Confirm it is you, and an added address joins only when someone there presses the link it gets.
• Changing your sign-in address: Ends every other session and any reset link the old inbox holds; only the browser that confirms the move stays signed in.

Support Access

Settings → Security → Support access is the only way a person at Kabora can see inside your business: a read-only window, opened with a written reason, that closes automatically. Every open window is listed there with its own Revoke, and Disable support access stops any from opening. See the help article on support access and your account's security.