# Keeping your account secure

## Built-in protection

- **No passwords** to steal or reuse. Every sign-in needs a fresh code sent to your email.
- Codes are **single-use** and **expire in 10 minutes**, and stop working after several wrong attempts.
- Changing your sign-in email needs codes from **both** the old and new address.
- The widget on your website contains no private information about your account.

## Good habits

- Keep your **email account** secure with a strong password and two-step verification. Your email is the key to your ReviewPine account.
- **Never share a sign-in code.** We will never ask you for one by phone, WhatsApp or email.
- **Sign out** on shared computers (account menu → **Sign out**).

> **Important:** If you receive a sign-in code you did not request, someone may have typed your email by mistake. Without the code they cannot get in; you can ignore the email.

Something looks wrong? Email **support@reviewpine.com** straight away.

Source: https://docs.reviewpine.com/account/security