Account Security

Account Security

Password, reset, and sign-in security behaviors currently confirmed across the shared Stareceipt codebase.

Last updated: 2026-06-02

Passwords

Stareceipt supports password-based sign-in. Use a unique password that is not shared with other services, and store it in a password manager where possible.

Resetting a forgotten password

  1. Open Forgot password.
  2. Enter your registered email address.
  3. Request and enter the verification code.
  4. Choose a new password.

If the verification code does not arrive within a few minutes, check your spam folder and try requesting a new code.

Two-factor verification during sign-in

Some accounts are protected by a second-factor authenticator code. When this is enabled for the account, sign-in pauses after the password step and asks for a time-based verification code from an authenticator app.

What is confirmed in the shared codebase today:

  • password sign-in can require a second-factor step,
  • the second factor is a time-based authenticator code,
  • invalid codes and repeated attempts are rate-limited.

Availability of self-service setup, disable flows, backup-code export, and account-security screens depends on your deployment. If your current client does not expose these controls, contact support.

Biometric unlock

Biometric unlock is not documented as a universal feature across the current shared clients. If your deployed mobile build exposes Face ID, Touch ID, or fingerprint unlock, follow that build's in-app instructions.

Device and session controls

Current shared Web and mobile clients do not document one universal Active Sessions or Revoke Session page. Session-management controls may differ by client build and deployment.

If you suspect unauthorized access

  1. Reset your password through the verification-code flow.
  2. Sign back in and review the recent account activity your client exposes.
  3. Contact support at support@stareceipt.com with your account email and a brief description of the incident.

RECEIPT