A stolen password is not enough
A browser we do not know has to prove it is you with a code from your email. You see every device that is remembered, you hear about new sign ins, and two factor authentication is there when you want more.
- On for every account
- Remember a device for 60 days
- Any authenticator app works
- Sign out every device in one click
- days a remembered device skips the code
- 60
- minutes a sign in code is valid
- 10
- backup codes with two factor authentication
- 10
- days of sign in activity kept
- 90
How it works
Three steps, and only when it matters
-
1
Sign in as usual
Enter your email and password. On a browser you have already remembered, that is all.
-
2
Confirm a new browser
On a browser we do not know, a 6 digit code goes to your email. Type it in and the sign in finishes.
-
3
Remember it, or not
Tick Remember this device and the code is skipped for 60 days. Leave it unticked on a computer you share.
Email code
A new browser has to prove it is you
Your password alone never signs anyone in from a browser your account has not used before. A short code is sent to your email first, so a leaked password is not enough.
- A 6 digit code sent to your account's email address
- It works once and for 10 minutes, and a new code replaces the old one
- Five wrong tries and the sign in starts over
- On for every account, with nothing to set up
Trusted devices
See every device, remove any of them
Remembered browsers are listed in your security settings with the browser, the system and when they were last used. Remove one, or all, and the next sign in from it asks for a code again.
- Your current browser is marked
- Remove one device or every device
- Trust ends by itself after 60 days
- Changing or resetting your password removes every remembered device
Sign in alerts
Hear about it when something is new
When your account is used from a browser or a country it has not been used from before, you get an email with the browser, the place and the time, so you can tell at once whether it was you.
- Browser, system, approximate location and time
- At most one email every 10 minutes
- A recent security activity list in your settings
- Sent in your own language
Two factor authentication
Add an authenticator app when you want more
Turn on two factor authentication and every sign in also needs a code from an app on your phone. Google Authenticator, Authy, 1Password and any other authenticator app work.
- Set up in about a minute with a QR code
- Ten single use backup codes in case you lose your phone
- Covers email and password, Google sign in and password resets
- Your authenticator code replaces the email code
If it was not you
One button ends it
Every new sign in email has a This wasn't me button. It opens a page that asks you to confirm, and then it closes the door.
- Every device is signed out
- Every remembered device is removed
- You get a link to choose a new password
- The link works once and expires after 7 days
Opening the email changes nothing. Only your confirmation does.
What it protects
Your calendar, your clients and your payments
Everything you have connected to Timelydo sits behind your sign in, so that is the first place we protect.
Your account
Bookings, availability, notes on people and invoices are all behind one sign in that new browsers have to confirm.
Your alerts
New browsers and new countries tell you themselves, so you notice a problem when it happens.
Your control
You decide which devices stay remembered, whether to use an authenticator app, and when to sign everyone out.
Everything included
All of it, for free
No tiers and no add ons. Here is what protects your account.
Sign in
- A code by email on new browsers
- Codes that work once
- A limit on wrong tries
- Google sign in supported
Devices
- Remember a device for 60 days
- A list of trusted devices
- Remove one or all
- Removed when you change your password
Alerts
- New browser and new country emails
- A This wasn't me button
- Recent security activity
- Emails in your own language
Two factor
- Any authenticator app
- Ten backup codes
- Covers every way in
- Your API key keeps working
Common questions
Do I have to turn the email code on?
No. It is on for every account. You only choose whether to tick Remember this device when you enter the code.
I use two factor authentication. Do I get the email code too?
No. Your authenticator code is your device check, so you are not sent an email code as well. You still get the new sign in email when a browser or country is new.
How long is a device remembered?
For 60 days from the day you entered the code. After that you are asked once more and can remember it again.
Can someone else use my remembered device?
The browser holds a random secret that only works for your account, and we store only a one way fingerprint of it. You can remove any device in your security settings, or change your password to remove them all.
Does it affect the people who book with me?
No. It protects your own sign in only. Your booking page, your links and your attendees do not change.
Start taking bookings today
Set up your event types, share one link, and let Timelydo handle the scheduling.
Free for individuals. No card required.