Sync and security
Your account
Sign in, passkeys, password reset, cloud vaults and deleting your account.
You don't need an account to write in Kithnote. You need one to create a sync vault, revoke connection kits and delete a cloud vault. Manage it at kithnote.app/account, or choose Manage your account in Settings.
Sign in
The account page offers:
- Continue with Google and Continue with Discord.
- Sign in with a passkey, once you've added one.
- Sign in, with your email and Account password (under the heading "Sign in with email").
To make an account with email, choose Create account, enter Your name, Email and an Account password of 12 to 128 characters, then choose Create account. Kithnote emails you a link to verify the address: "Check your email to verify your account, then sign in." You must verify your email before you can create a sync vault or add a passkey. The link works for an hour; signing in again sends a new one.
Account and vault passwords are different. Your Account password signs you in to the account. Your vault password (optional) locks a notebook on a device.
You stay signed in for up to 7 days after you last use your account. Sign out ends the session on that browser only.
Passkeys
Under Passkeys, choose Add a passkey to sign in with Windows Hello, a security key or a passkey saved on your device. Your email must be verified first. Remove one with Remove passkey. If your account uses email and password, it stays available for recovery.
Reset your account password
On the sign-in form choose Forgot password?, enter your email and choose Send reset link. You'll see "If an account uses that email, a reset link is on its way." Open the link, choose a new password and you'll see "Account password updated. Your vault password has not changed." Resetting signs you out everywhere. Resetting doesn't revoke connection kits; devices with a kit keep syncing. Someone who gets into your account can't read your notes, but can delete your cloud vaults or revoke their kits. If you think your account was compromised, also revoke old connection kits.
When you're signed in, Account recovery has Email an account password reset.
Account recovery can't unlock notes
Resetting your account password doesn't recover a lost vault password or connection kit. Save an encrypted backup and your kit somewhere safe.
Delete a cloud vault
Under Cloud vaults each vault is listed with its ID, number of notes and size. Type the vault ID where it says "Enter the vault ID to confirm cloud deletion", then choose Delete this cloud vault.
Devices that were connected lose access and show Sync needs attention. Choose Disconnect this device on each one. The notes on your devices are kept. Cloud access is revoked straight away ("Cloud access revoked. Encrypted objects are queued for removal. Local notebooks are kept.") and the encrypted data is removed by the daily cleanup (large vaults can take more than one run). Service backups are scheduled to expire after 35 days.
Delete your account
Under Delete account:
Delete all cloud vaults first
The Delete my account button stays disabled while you still have any cloud vault.
Sign in again if needed
If your session is more than ten minutes old, sign in again first.
Confirm
Type DELETE where it says "Enter DELETE to confirm". If you use an email account, also enter your account password. Then choose Delete my account.
Deleting your account removes your account details, sign-in methods, passkeys and sessions from the live service. Copies remain in encrypted service backups until they expire (scheduled after 35 days). The notebooks saved on your devices are kept.
The same ten-minute rule applies to deleting a cloud vault and to Revoke old connection kits in the notebook. If you see "Sign out and sign in again before changing cloud access.", sign out and sign in again.
Questions
Email [email protected].