Before you can create new API keys, please review and accept the following:
Account
Privacy & security
Password, two-factor authentication, active sign-ins, connected accounts, and control over your data. Changes here affect all sessions, profiles, and webhooks under this account.
Security
Password + recovery options.
We'll email you a link to set a new password. The link expires after 60 minutes. Once you set a new password, you'll be signed out everywhere else.
Didn't get it? See why emails can be delayed.
Two-factor authentication
Add a code from your authenticator app on top of your password. You'll get recovery codes when you set it up — keep them somewhere safe. If you lose both your authenticator app and your recovery codes, you'll need to contact support to get back in.
Active sign-ins
Browser sessions where you're signed in to the dashboard. Distinct from the automation sessions you run in the Driftstack desktop app. IP omitted for privacy. The "current" session is the one you're using right now and can't be revoked from this list — sign out from the menu instead.
- Sign in to load your active sessions.
Connected accounts
Google or GitHub accounts linked to yours. Each one lets you sign in with that provider. Remove one to stop it signing in to your account — browsers already signed in with it stay signed in until you sign them out above. You can't remove your only way to sign in; set a password first.
- Sign in to load your linked accounts.
Sign in with Google or GitHub isn't available right now. Password sign-in works as usual.
Recent activity
API keys created or revoked, sessions started or ended, and other account changes. Newest first.
- Sign in to load recent activity.
How we protect your data
Saved profiles and stored credentials are encrypted in storage, and each one can only be unlocked for the account that owns it.
Profile encryption
Encrypted in storage
Profiles are stored encrypted (AES-256-GCM) and are only unlocked while an authorized session is using them.
Account binding
Tied to your account
Encrypted data is tied to the account that owns it and, for individual records, to that exact record, so it can't be read from anywhere else.
Activity record
Changes are logged
Review changes to your credentials in your audit log. Everyday use of a credential during a session is not logged as a separate event.
Read more at driftstack.io/trust. Data export and account deletion aren't self-service yet — to get started, see the danger zone below.
Danger zone
Account deletion is irreversible. All sessions, profiles, API keys, and webhook endpoints are immediately revoked, and stored account data is purged on the schedule in the privacy policy. Invoice history is kept for 7 years as required by Dutch tax law and can't be deleted on request.
To delete your account, email [email protected] or open Help. We'll confirm it's you and help you export your data first, because deletion can't be undone.