Security

TimeCurve supports multiple authentication methods. You can manage all of them from Settings → Security.

Password

Changing your password

1. Go to Settings → Security.
2. Click Change password.
3. Enter your current password and your new password (twice for confirmation).
4. Click Update password.

If you forget your current password, use the Forgot password link on the login page to receive a reset link by email.

Password requirements

• Minimum 8 characters
• We recommend using a passphrase or a password manager for maximum security

Passkeys

Passkeys let you sign in without a password using your device's biometrics (Face ID, Touch ID, Windows Hello) or a hardware security key. They are more secure than passwords and resistant to phishing.

Adding a passkey

1. Go to Settings → Security.
2. Under Passkeys, click Add passkey.
3. Follow your browser or device's prompts to register a biometric or security key.
4. Give the passkey a descriptive name (e.g. "MacBook Touch ID" or "YubiKey 5").

Removing a passkey

1. In Settings → Security → Passkeys, find the passkey you want to remove.
2. Click the ⋯ menu and select Remove.

You should always keep at least one active authentication method. If you remove your last passkey and have no password set, you may be locked out.

Magic link (passwordless email)

You can also sign in by requesting a one-time login link sent to your email address. This option appears on the login page as Send a magic link. No password or passkey is required — just click the link in the email.

Active sessions

Under Settings → Security → Sessions, you can see all devices currently signed in to your account. Each session shows:

• Device / browser
• Approximate location
• Last active time

Click Revoke next to any session to sign it out immediately. Click Revoke all other sessions to sign out all devices except the current one.

Two-factor authentication

Two-factor authentication (2FA) adds an extra layer of security by requiring a one-time code in addition to your password.

Enabling 2FA

1. Go to Settings → Security.
2. Under Two-factor authentication, click Enable.
3. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password, etc.).
4. Enter the 6-digit code from the app to confirm setup.
5. Save your backup codes in a safe place.

Backup codes

When you enable 2FA, TimeCurve generates a set of single-use backup codes. These allow you to access your account if you lose access to your authenticator app. Store them securely (e.g. in a password manager).

Disabling 2FA

1. Go to Settings → Security → Two-factor authentication.
2. Click Disable and confirm with your current password.