Security

Last updated 07/11/2026

1. Creating an Account

You give an email address, a mobile number and a password. Then you choose how to finish: Continue with OTP sends a 6-digit code to your email and the account is created when you enter it, or Continue with Password creates the account immediately without a code. The OTP is checked by IndoVerification, and the account lives in Firebase.

2. Signing In

Enter your email address or mobile number, then choose how to prove it is you: a 6-digit OTP sent to you, or your password. One of the two is enough - signing in never asks for both. Signing in only ever opens an account that already exists.

3. Protecting the App

Indoone has Auto-Lock, App Lock and Biometric Unlock. Once you enable them, the app locks itself when you leave it and asks for your PIN or your fingerprint before it opens again.

4. Screenshots

In the app, the accounts page is protected: the system refuses a screenshot and hides the app in the recent-apps preview, so a code on that screen cannot be captured. A browser tab cannot block screenshots, so on the website the codes are in the image if you take one. Keep that in mind in a meeting or on a call.

5. Your Part

These measures raise the cost of someone getting in; they cannot promise that nothing ever will. Keep your PIN and your recovery files to yourself, and tell us if you think an account has been reached by someone else.