Security and privacy

Two-step verification

Turn on two-step verification in Settings → Security with an authenticator app. Recovery codes, in the form XXXX-XXXX-XXXX, are shown once, and setup does not complete until you tick that you have saved them. The server keeps only hashes of them.

At sign-in, Use a recovery code instead is always shown. Generate new codes replaces the whole set, and the old codes no longer work.

Sessions

Sign out other devices ends every other session. This device stays signed in, and running agents are not affected.

API keys

Keys are scoped, and can be rotated or deleted in Settings → API keys. When you create a key, the dialog says This is the only time you will see this key. and cannot be closed until you tick that you have saved the key.

Connections

• How connection credentials are stored

Code agents

A code agent runs in a container created for the run and removed when the run ends. The container does not inherit the platform’s environment, and variables whose names look like secrets are removed before it starts. By default it has no network access.

Workspace isolation

Asking for another workspace’s run returns 404, not 403, so a run id cannot be used to learn whether that run exists.

Delete your account or data

To delete your account or your data, see Data deletion and the privacy policy. An account scheduled for deletion cannot be signed in to. The link in the email we send cancels the deletion.