Verified registration
Sign up with an address you control. We send a confirmation link that expires in 24 hours, so an unconfirmed account never becomes usable.
Private · Verified · Single owner
An inbox identity
you can actually trust
Register with the email address you already control, confirm it once, and sign in from any device. Confirmation and password-reset links go to that address and nowhere else.
- HTTPS everywhere, with HSTS
- PBKDF2-hashed passwords
- Single-use email links
Services
Four things this account does
Registration, verification, sign-in and recovery are all self-service. Nothing needs to be emailed to a person or approved by hand.
Sign in anywhere
One address, one password, any device. Sessions last seven days and are dropped the moment you sign out.
Self-service recovery
A forgotten password is recovered by email rather than by a support ticket. Reset links work once and expire after an hour.
Locked down by default
Strict content policy, frame denial, a CSRF token on every form, and emailed tokens stored only as hashes.
Process
Four steps, about a minute
No paperwork and no waiting for approval.
-
1
Enter your address
Choose the email address you want to use, and a password of at least eight characters.
-
2
Confirm the link
Open the message we send within 24 hours. That single click proves the address is yours.
-
3
Sign in
Use the same address and password on any device. The session keeps you signed in for a week.
-
4
Stay in control
Recover or change your password by email whenever you need to. Every link stops working after one use.
Security
Security is the starting point, not an add-on
Every request, form and stored credential is handled the same way, whether you sign in once a week or once a year.
- Plain HTTP is redirected to HTTPS, and HSTS keeps the browser there
- Passwords are stored as PBKDF2-SHA256 hashes, 240,000 iterations, unique salt
- Session cookies are HttpOnly, SameSite=Lax and Secure on every HTTPS page
- Every form carries a double-submit CSRF token; emailed tokens are stored as hashes
- Repeated failures are throttled per address and per IP
What we keep
Your email address, a salted password hash, and the timestamps needed to run the account. No profile, no tracking script, no advertising pixel.
Links in our messages point only at this site and stop working after one use. Unused confirmation links expire in 24 hours, reset links in one hour.
Questions
Things people ask before signing up
How long does the confirmation link last?
Twenty-four hours, and it works only once. If it has expired, sign up again with the same address.
The confirmation email never arrived.
Check the spam folder first, and make sure the address was typed correctly. If nothing arrives within a few minutes, call the number in the footer and we will look at the outgoing mail for you.
Can I stay signed in on more than one device?
Yes. Each sign-in creates its own session, so signing out of one browser leaves the others signed in. Sessions expire after seven days either way.
How do I close or delete my account?
Ask us using the phone number in the footer and we will remove the record for you. Self-service deletion is not built yet.
Create your account in under a minute
All you need is an email address you can open right now.