Account Security Overview
Your Serene Studio account is the single point of access to your workspace, including your mail, files, contacts, and billing settings. This article walks through the baseline security steps every account holder should complete.
How sign-in works
Serene Studio has no passwords. You sign in with one of these:
- A passkey on your phone or computer, or a hardware security key.
- A sign-in link sent to your email. The link works once and expires after a short time.
- A linked account from Microsoft, Google, LinkedIn, or GitHub.
A linked account is attached to your Serene Studio account only when you link it yourself from inside Serene Studio. Having the same email address is not enough.
If you do not have an account yet, start with Tenant Setup.
Step 1: Add a passkey
A passkey is the strongest way to sign in. It cannot be phished, and every passkey sign-in asks for your PIN, fingerprint, or face, so having the device alone is never enough.
To add a passkey:
- Open Serene Studio and go to Settings, then Privacy & Security.
- Open Sign-in and passkeys.
- Select Register a passkey and follow the prompt from your browser or device.
Passkeys that sync through your password manager work. So do hardware security keys such as a YubiKey. Consider registering a second passkey on another device, so that losing one device does not lock you out.
Step 2: Create backup codes
Backup codes are single-use codes that you generate and keep. You enter one on the account recovery page, together with a second recovery check. They do not replace a passkey or an authenticator app.
To create backup codes:
- Go to Settings, then Privacy & Security.
- Open Recovery codes.
- Select Generate backup codes.
- Download or copy the codes right away. They are shown once and cannot be shown again.
Each code works one time. Store them somewhere safe, such as a password manager. See MFA Setup and Recovery for details.
Step 3: Review your active sessions
Every browser or device where you are signed in is listed under Settings, then Privacy & Security, then Sessions. Each row shows:
| Item | What it means |
|---|---|
| Device | The browser and operating system |
| Started | When that session began |
| Last active | When that session was last used |
| This session | Marks the session you are using right now |
If you see a session you do not recognize, select Revoke. Revoking a session signs that device out straight away. To end every session, including this one, select Sign out everywhere, then sign in again on the devices you use.
Sessions also end on their own. By default a session lasts at most 7 days, even if you stay active.
Clearing the offline cache
To open pages quickly, your browser keeps an encrypted copy of recent chats and notifications. It is removed when you sign out. To clear it yourself, go to Settings, then Privacy & Security, and select Clear offline cache under Offline cache. Your messages and settings are not affected.
Next steps
- MFA setup in detail — the second sign-in step, the authenticator app, and backup codes.
- Tenant Setup — configure your workspace after securing your account.