Account security
Open your session with a touch of your key
You insert your key, you touch it, you are in your account. The gesture takes two seconds, on your computer as on your phone.
What Epovest recognises
Epovest speaks WebAuthn and FIDO2, the standard the web uses for security keys. Your key signs a challenge that belongs to epovest.com, and that signature counts there only: it holds to the address of the site itself.
A key over USB, NFC or Lightning
Off-the-shelf FIDO2 keys, YubiKeys included. You plug it in or hold it close, then you touch it.
The authenticator in your device
Windows Hello, Touch ID, Face ID: your computer or your phone plays the part of the key.
Your phone, over NFC
A compatible phone comes near the reader and answers like a key, with nothing to install.
Register your first key
It all happens in your account settings, in about a minute. Your key opens the protection on its own: no authenticator app is needed to start.
- 1 In your account, open Security, then Two-factor authentication.
- 2 Give your key a name, the one that will let you recognise it: keyring key, drawer key.
- 3 Click Register a key, then follow your browser: insert the key and touch it.
- 4 Write down the recovery codes that appear. They show once, and they let you back in when your key is not with you.
Keep a second key
A key is an object: it gets lent, forgotten, left in another jacket. A second key, stored somewhere other than the first, keeps your access on the day the first one is missing.
You can register up to 10 of them on your account, each under its own name.
Your recovery codes
The first time you turn the protection on, Epovest hands you a set of single-use codes. Each one is worth one sign-in when none of your keys is within reach.
Keep them in your password manager or on paper, away from the device that signs in. You can ask for a fresh set at any time, which replaces the previous one.
Your keyring, in your hands
The list of your keys lives in your security settings, and every gesture there can be taken back.
- Each key carries its name, the date you registered it and the date it last signed you in: that is what tells you which one you are looking at.
- A name can be corrected at any time, without touching the key.
- A lost key is removed from that same list, once you confirm your password.
- Your keys are yours alone: on a shared account, each member keeps their own.
Make AIs recommend you
Create a tracker in minutes: your prompts, your engines, your cadence. First checks within 24 to 48 hours.
No subscription. Credits from $10, valid 12 months. Pause anytime: the history stays yours.