Your account

One account, any number of Pressies. Each Pressy is its own subscription, but the sign-in, the two-factor setup and the timezone are set once, here.

The page opens with a posture strip — email, password, two-factor, sign-in methods — so "is this account safe" is answered before any form. The numbers in it are read from the database, including how many recovery codes you have left.

Signing in

Two ways in, and you can have both: email and password, or Google. A password is at least 10 characters. If you signed up with Google you have no password until you set one, and setting one gives you a second way in rather than replacing the first.

Disconnecting Google when it is your only way in is refused rather than allowed and regretted.

Two-factor authentication

An authenticator app — 1Password, Authy, Google Authenticator, any of them. Scan the QR code, type the six digits to prove the clocks agree, then save the recovery codes.

The recovery codes are shown once. They are your way back in if the phone is lost, and the account page tells you how many are still unused.

The code is asked for every time you sign in: inline when you sign in with a password, and on a separate step when you sign in with Google, which has no code step of its own.

Changing your email address

Your email address is the account's recovery root — whoever reads it can reset your password — so changing it is deliberately slower than the rest of the page:

1. We ask for your current password.
2. A confirmation link goes to the new address and works for 15 minutes.
3. Your current address is told that the change was requested, so you would know if it wasn't you.

Nothing changes until you click the link. You keep signing in with the old address until then, and your Pressies are untouched by any of it.

Your timezone

Set it once and every date in the product follows: backup times, cron runs, renewal dates, invoice dates, log timestamps. The machines run on UTC and we convert — cron shows both clocks side by side so a 3am job is never ambiguous.

Deleting the account

Delete my account, at the bottom of the account page, schedules the deletion: nothing happens for seven days, and you can undo it there at any point in that week. It erases your email, name and password; invoices stay, without your name on them, because tax law requires it. Your domains are yours and stay at your registrar.

The button refuses while any Pressy is still running — cancel them first, so a live site never disappears as a side effect of a privacy request.

If you only want to stop paying, cancel the Pressies instead: each stays online until the period you have already paid for ends, and you can undo the cancellation any time before then.