Account & security
Your sign-in credentials and account lifecycle · passkeys log you in without a password · deletion is always yours to triggerPasskeys
Sign in and confirm sensitive actions with Face ID, Touch ID, or a security key. Email links stay available as the fallback.
No passkeys yet.
Second-degree bridges
When on, your confirmed trusted ties can appear as a “mutual contact who can introduce you” hint to people you know when they discover those contacts. Only coarse signals are shared (trust tier, a 5-step warmth bucket) — your notes, history and exact warmth never leave your vault. Off by default.
Incognito browsing
By default the owner of a card you open is told it was you — that is what turns an ordinary visit into a warm introduction later. Incognito withholds your identity everywhere: no name on their side, no footprint on yours. It follows you to every card until you turn it back off.
Appear in the Plaza
While this is on, publishing a public ask puts your profile on the Plaza timeline — your card and that public ask, never anything private. Turning it off does not hide you from intent matching, which is a different thing.
Inbound email alias
Mail sent to your alias addresses below is received by your assistant like any other request — triaged first, never straight to your inbox. Turning this off makes every alias address bounce.
Delete account & data
After a 7-day cooling-off period (reversible), a cryptographic erase runs: destroying the keys makes all ciphertext permanently unreadable.