Sign in and security: your way in, passkeys, the authenticator, sessions and login alerts

Settings → Security → Sign in, in four tabs: Ways to sign in, Active sessions, Login alerts and Login history.

Ways to sign in

Kabora is passwordless: an emailed code proves an address, and every account has it. Add a passkey — your device's own lock — or an authenticator app, and link Google or Apple. An account that had a password keeps it until you remove it.

Sign in with, at the top, is the one way Kabora asks for when you sign in: the one you set up most recently, until you press Use this beside another. One proof is the whole sign-in, and the emailed code is always one press away if the other is not to hand.

The authenticator app

Under Two-step verification, Turn on shows a code to scan. Once it is on it is how you sign in, unless you pick another under Sign in with. You get backup codes to keep somewhere safe; each works once, in place of the app's code. It is per person, not per business. The Kabora app has no authenticator step, so on the phone you get the emailed code instead.

Sessions and login alerts

Active sessions lists every signed-in device with when it was last seen, and ends any of them in one press; Login history is every sign-in, worded in your own clock. Login alerts send an email — and a text, if you give a number — when a new device signs in.

Support access

Settings → Security → Support access is the only way a person at Kabora can see inside your business: a read-only window a staff member opens, with a written reason, that closes on its own. Every live window is listed there with its own Revoke, and Disable support access stops anyone at Kabora opening one at all. See "Support access and your account's security".