Your account & security

Your panel account controls every key you sell, so it deserves the best protection. Open Profile from your picture at the top right or at the bottom of the sidebar.

Account

• Photo: JPG, PNG, GIF or WebP up to 2 MB. Pictures are made small and square for you; animated GIFs stay animated.
• Avatar frame: pick a frame for your picture. Two are earned: Guardian with two-step sign-in on, Royal crown with Strong protection.
• Details: your name and email. Changing the email asks for your password.
• Time zone: the panel shows every time in it, and "today" and the chart days start at your own midnight. It is picked up from your browser when you sign in; change it here, or press Use this browser's zone. Hover any time to see it in UTC too. Your apps, the API and CSV downloads always use UTC.

Security

The Protection meter tells you how safe the account is (Basic, Good or Strong) and what is still missing.

• Password: change it here. A new password signs out every other browser.
• Authenticator app: scan the QR code with Google Authenticator, Microsoft Authenticator or similar, then type the 6-digit code. From then on, signing in asks for a code from the app.
• Recovery codes: ten one-time codes shown when you turn two-step sign-in on. Keep them somewhere safe: they are the way back in if you lose your phone.
• Recent activity: sign-ins and security changes on your account.

Google

On the sign-in or sign-up page press Continue with Google and choose your Google account. The first time, a PWF Auth account is made for it with the name and email Google gives (only addresses Google has verified); after that the same Google account signs you straight in. If your account has an authenticator app or Telegram approval, that second step is still asked.

Already have an account with that email? Continue with Google connects Google to it and signs you in, because Google has confirmed the mailbox is yours. For your safety the account's old password is removed and every other browser is signed out (anyone else who knew it is shut out); set a new one in Profile → Security → Password to sign in with your email too. You can also connect Google yourself in Profile → Security → Google. Disconnecting asks for your password; an account made with Google has no password at first, so set one before you disconnect it.

Telegram

Connect your Telegram to the @pwfauthbot bot to:

• approve sign-ins with one tap instead of typing a code,
• get a message on every sign-in, password or email change,
• get a password reset code if you forget your password,
• sign out everywhere from the bot with /security if something looks wrong,
• sign in with Telegram: on the sign-in page press Sign in with Telegram, open @pwfauthbot and tap the number your browser shows (only the right number signs you in, so a link someone sends you can't). If your account has an authenticator app, its code is still asked, unless Approve sign-ins in Telegram is on: then Telegram is your second step and signing in with it is enough.

New here? Sign up with Telegram on the sign-up page: Telegram confirms who you are and only your email is asked. Such an account has no password at first; set one in Profile → Security → Password (no current password is asked the first time) to sign in with your email too.

The bot also answers anyone holding a key: /check KEY shows its status and time left, /reset KEY moves it to a new PC by the app's own rules. A Super admin can turn sign-in, sign-up and these commands off.

Browsers

Every browser signed in to your account is listed with its device and last activity. End one you do not recognise, or Sign out other browsers to keep only this one.

Messages

Messages (in the sidebar, under Support, with the number of new answers; also in the account menu) is your conversation with PWF Auth support: write a question, add a picture, and the answer appears the moment support sends it. Support is marked with a verified badge: only that account is really PWF Auth. You see when support is online and typing…; under your messages, ✓ means sent and a green ✓✓ means support has read it. Hover one of your messages to edit it (it shows "edited") or delete it: a delete is for both sides, so support no longer sees it either. To answer one message in particular, hover it and press Reply: your message shows it as a quote (click the quote to jump to it). In an empty box, ↑ edits your last message; Esc stops editing or replying.

On the right of Messages: whether support is online now and how fast it usually answers, whether your Telegram is connected (answers reach you there while you are away), a switch for the new-message sound, every picture of the conversation (click one to view it), and a short How it works.

Pictures: press the picture button, paste a screenshot (Ctrl+V) or drop a picture on the conversation. Big photos are shrunk in your browser before they go (up to 2560 px on the long side, high quality: no visible difference), so even a 10 MB photo sends in a moment; you see it in the box with its size before and after, and a bar on it while it uploads. Click a picture in the conversation to open the viewer: zoom with the wheel, a pinch or a double click, drag to move, ← → (or a swipe) for the other pictures, rotate, download; close it with ✕. Your photo (or initials) sits next to your messages, the PWF Auth mark next to support's.

Stamps: press and hold a message, a dial opens around your pointer (or finger): slide to a stamp and let go (or use the stamp button on a message, then arrows and Enter). Got it, Thanks, On it and Need details say it in one move. Urgent also reaches support on Telegram at once and puts your conversation first; Solved closes the conversation (writing again opens it). Each side puts one stamp on a message; click your own stamp, or choose it again, to take it back. While you are on any other page of the panel, a new answer pops up at once in the corner (who wrote, the start of the message, Open) with a soft two-note sound; Mute sound on that box turns the sound off in this browser (press it again to turn it back on). The sound plays once even with several tabs open, and on the Messages page only when that tab is in the background. Browsers play sounds only after you have clicked somewhere on the site once. A number on your avatar and a line at the top of the panel also tell you when support wrote; when you are away, the message also reaches you on Telegram (if connected). Never send passwords, app secrets or whole keys of customers.

Your customers, or anyone, can also write to us or open a support ticket: a ticket gets a reference (PWF-XXXXXX) and a private link to follow our answers.

Deleting your account

At the bottom of Account on your profile, Delete my account removes your account for good, with every application only you own and everything in them: keys, customer accounts, sessions, resellers, updates, texts and logs. Programs using those keys stop working. An application you share with another account stays with them. To confirm, type your email address, your password (when the account has one) and the code from your authenticator app (when it is on). You get a Telegram message and an email that it happened.

Forgot your password?

On the sign-in page press Forgot it? and choose how to get a 6-digit code: through Telegram (if connected) or by email. Type the code and pick a new password.