Account and security

Passkeys

Passkeys are the safest way to sign in: there’s no password to steal or phish. Add one in Settings → Sign-in and security, using your phone, your computer or a security key. Adding or removing a passkey needs a sign-in from the last 15 minutes, so someone using an unlocked device can’t quietly add their own. Keep at least one other way in.

Two-step verification

Turn it on in Settings → Sign-in and security → Two-factor authentication. Scan the QR code with an authenticator app, then save your 10 recovery codes somewhere safe. Each code works once if you lose your phone. After 10 wrong codes, sign-in pauses for 15 minutes.

Password

A password is optional if you use passkeys or email links. If you set one, it needs 12 to 128 characters, with a number or symbol. Forgot it? Choose Forgot password? on the log in page. Resetting your password signs you out everywhere else.

Sessions and sign-in history

• Active sessions lists every device signed in to your account. Sign one out, or use Sign out others to end every session except this one.
• Sign-in history shows recent sign-ins.
• When a device you haven’t used in 30 days signs in, Frame emails you. The email names the device and the rough time, never your IP address or location.

Changing your email

In Settings → Sign-in and security → Change email, Frame sends a link to the new address. Your current email stays in charge until you open it.

If something looks wrong

Change your password, sign out other sessions and check your passkeys. Frame will never ask for your password or ID by email, or ask you to read a code to anyone. To report a security issue, email security@frameprivacy.com.