Account security
Your Ody account is protected by your sign-in method (Google, Apple, or email and password), by confirmation links sent to your inbox for every credential change, and by verification checks at signup. Here is what you control and what we recommend.
Choose a strong sign-in
- Google or Apple sign-in (recommended): Continue with Google or Sign in with Apple means no separate Ody password to manage, and your account inherits that provider's protections, including two-step verification if you have it enabled there. You can still add a password as a second way in.
- Email + password: passwords are at least 8 characters (128 at most). Use a long, unique one from a password manager. If you forget it, reset it yourself from the sign-in page.
Changes to your sign-in are confirmed by email
Ody never changes how you sign in without a link opened from your inbox:
- Resetting a forgotten password sends a one-hour, single-use link to the account email.
- Changing the email you sign in with sends a 24-hour link to the new address, and tells the current address about the request. Nothing moves until the new inbox confirms.
- Changing your password or your email while signed in asks you to Confirm it's you if your last sign-in was more than ten minutes ago.
- Ody Support can send you these links too, but can never set an email or a password for you.
After each change, every other device is signed out and you receive a notice (Your Ody password was changed, A sign-in email change was requested on your Ody account, or Your Ody sign-in email was changed). If a notice describes something you did not do, click Secure my account in it (it opens the reset form), or reply to the email from your account address so our team can review.
Sign out of shared devices
Signing out is per device. Do it on any shared or public computer:
- Click your profile chip at the bottom of the left rail.
- Click Sign out.
On mobile web and in the iPhone and Android apps, sign out from the Settings / More area. There is no separate "sign out everywhere" button, but changing your password does exactly that: every other device is signed out the moment the new password is saved.
Recognising a genuine Ody email
- It comes from [email protected] and replies go to [email protected].
- Links go only to app.ody.co or help.ody.co. Hover before you click.
- Ody never asks for your password, a code, or your card details by email or phone.
What Ody verifies, and what it never stores
- Phone verification at signup: a one-time SMS code confirms a real human behind each account.
- Identity verification: a one-time government-ID + selfie check per workspace, handled by Stripe Identity. Ody never stores your ID.
- Payments: handled by Stripe; Ody never stores your card details.
Related articles
Frequently asked questions
Does Ody support two-factor authentication?
Not as a separate Ody setting yet. Signing in with Google or Apple gives you that account's protections, including any two-step verification you have enabled there.
I received a security email from Ody. Is it real?
Ody's security emails come from [email protected], link only to app.ody.co or help.ody.co, and never ask for your password. If the change wasn't you, use the Secure my account button or reply to the email so our team can review.
Does signing out on my laptop sign me out on my phone?
Sign out is per device. Changing your password or your sign-in email, however, signs out every other device at once, which is the quickest way to kick out a session you don't recognise.
Does Ody store my card or my ID?
No. Payments run through Stripe and Ody never stores your card details; identity verification is handled by Stripe Identity and Ody never stores your ID.