Account and security
Account security, two-step verification and passkeys
How sign-in works through MobieusIDP, how to protect your account with authenticator app codes and backup codes, and where passkeys fit in.
Updated
CraftKeep launches soon. This guide describes how it works at launch.
Your design library is valuable, so CraftKeep keeps sign-in simple and strong. This article explains how your account is protected and the steps you can take to protect it further.
Signing in with MobieusIDP
CraftKeep uses MobieusIDP for creating accounts and signing in. Your password is handled by MobieusIDP, and CraftKeep never stores your password.
When you sign up or sign in, CraftKeep hands that step to MobieusIDP and then brings you into your library. If you already have a MobieusIDP account, you use the same sign-in for CraftKeep.
Two-step verification with an authenticator app
Two-step verification adds a second check when you sign in. After entering your password, you also enter a short code from an authenticator app on your phone or computer. These codes change regularly, so a stolen password on its own is not enough to get into your account.
Two-step verification with authenticator app codes (also called TOTP) is supported by MobieusIDP. Setting it up involves:
- Turning on two-step verification from your account.
- Adding CraftKeep to your authenticator app.
- Entering a code from the app to confirm it works.
From then on, you enter a code from the app each time you sign in.
Backup codes
MobieusIDP also provides backup codes. These are one-time codes you can use to sign in if you lose access to your authenticator app, for example if you replace your phone. Keep them somewhere safe and separate from your phone, such as a printed copy in a drawer.
Passkeys
Passkeys let you sign in with your fingerprint, face or device screen lock instead of typing a password. Passkeys for CraftKeep are planned. Until they are added, two-step verification with an authenticator app is the best way to add extra protection to your account.
Private by default
Everything you upload is private to you unless you choose to share it. Search, previews and downloads only ever show your designs to you and to people you have explicitly shared with. See Privacy and copyright and Sharing and guilds.
Your files are encrypted in transit and at rest. Read more on the security page.
Payment details
Card payments are handled by Stripe. CraftKeep never sees or stores your card number. See Plans, billing and changing your plan.
Tips for a secure account
- Turn on two-step verification with an authenticator app.
- Store your backup codes safely.
- Use a password that is unique to your MobieusIDP account.
- Sign out on shared or public computers.
If you think something is wrong
If you notice activity you do not recognize, or you lose access to both your authenticator app and your backup codes, visit the contact page for help.