Key takeaways
- Turn on login 2FA via email so new devices need a code.
- Review your trusted devices and revoke anything you do not recognise.
- Use Log out everywhere if you think someone else has access.
Use a strong password
Sharklio passwords need at least 10 characters, uppercase and lowercase letters, a number, and a special character, and they cannot contain your email address. The strength meter shows when a password is good enough. Changing your password logs out your other devices.
Sign in with Google
You can link a Google account under Account and log in with one click. You can also switch to a different Google account later. To unlink Google, set a password first so you can still log in.
Turn on login 2FA via email
With login verification on, every login from a new device needs a 6-digit code sent to your email. Turning it on trusts the device you are using and logs out every other device. Turning it off needs a code as well, so nobody can switch it off with only your password.
Trusted devices
When you enter a login code, you can trust that device for a year so it does not ask again. Your account page lists each trusted device with its browser and system, a partly hidden IP address, when it was added, and when it expires. Revoke one device or all of them at any time, and they will ask for a code at the next login.
If something looks wrong
- Change your password, or set one if you only use Google.
- Use Log out everywhere on your account page.
- Revoke every trusted device, then turn on login 2FA via email.
- Contact [email protected] and tell us what you noticed.
Every security change, such as a new trusted device or a linked Google account, also appears in your notifications.
Frequently asked questions
What makes a valid Sharklio password?
At least 10 characters with uppercase and lowercase letters, a number, and a special character, and it cannot contain your email address.
How long does a trusted device stay trusted?
One year. You can revoke a single device or all of them at any time from your account page.
What should I do if I see a login I do not recognise?
Change your password, use Log out everywhere, revoke your trusted devices, turn on login 2FA via email, and tell [email protected] what you noticed.