Help · Start here

How your keys are kept

Read-only where possible, encrypted, never shown again, and never sent by email.

About 3 minutes.

Read-only first

Wherever a network offers a read-only key, use that one: RevWarn only reads reports, it never changes anything in your accounts. Impact has a read-only token; Google and Search Console use a read-only Viewer or Restricted account; the Cloudflare token only reads analytics.

Where keys live

Each key is stored as an encrypted secret of your dashboard. Once saved, nobody can read it back, including us: it can only be replaced. Keys never appear in emails, logs or the dashboard's pages; the Setup page shows only whether each one is set.

Sending them

Don't send keys by email or chat. Keep them ready for your setup session, where they go straight into your dashboard's encrypted settings.

Changing or revoking a key

Create a new key at the network, give it to us to replace the old one, then revoke the old one at the network. Revoking a key at the network stops RevWarn from reading that account at once; the Setup page will show it as failing.

Signing in

There's no password. You sign in with your email address and a one-time code (or your Google account), through Cloudflare Access. Only the addresses on your plan can sign in.