Account & settings
Account security & sign-in
How sessions, tokens, and sign-out keep your account safe.
Your sign-in is protected by short-lived access tokens that refresh automatically, with the refresh token stored in your device's secure keystore. Signing out clears your tokens from the device and revokes the session. Login is rate-limited to protect against guessing attacks.