Account and security

These settings belong to you, not to an organization, and apply in every organization you’re in.

Profile

Settings → Account shows your name and email. Change your name and click Save name.

Change your password

On Settings → Account, enter your current password and the new one twice, then click Change password.

• Passwords must be 10 to 128 characters. A long passphrase from your password manager is best.
• Changing your password signs you out on every other device. The browser you’re using stays signed in.

Forgot your password?

On the sign-in page, click Forgot your password? and enter your email. The reset link works once, for 1 hour. Resetting your password signs you out everywhere.

Where you’re signed in

Settings → Security lists every browser and device signed in to your account, with when each was last active. The one you’re using is marked This browser.

• Click Sign out next to any session you don’t recognise.
• Or click Sign out all other sessions to keep only the current one.

If you see a session you don’t recognise, sign it out and change your password.

Sessions last 7 days and are extended while you keep using Shiplon.

Two-factor authentication

Not available yet. It’s planned, and this page will explain how to turn it on once it is.

How Shiplon protects your account

• Passwords are stored only as a strong one-way hash, never as text.
• Email confirmation is required before your first sign-in.
• Repeated sign-in attempts from one address are slowed down, which makes guessing passwords impractical.
• Sign-in and sign-up responses don’t reveal whether an email has an account.

Good practice

• Use a unique password you don’t use anywhere else, kept in a password manager.
• Sign out on shared computers.
• Keep your email account secure: whoever controls it can reset your Shiplon password.