Accounts, signing in, billing and receipts

KeyDrift does not have passwords. Enter your email on the sign-in page and we email you a single-use link that signs you in and then expires. There is no credential of yours stored on our side, and nothing to reset, rotate or leak.

This is a deliberate position rather than a missing feature. The product exists because secrets end up in places they should not; minting another one and asking you to invent, remember and reuse it would be hard to defend.

Signing up is the same form. The first time you request a link for an address, the account and its workspace are created when you follow it. There is no separate registration step.

Check spam and any address-plus-tag filters first — the mail comes from our authentication provider, not from a person. If it is genuinely absent after a minute, request another; each new link invalidates the one before it, so always use the most recent email.

Links expire shortly after they are sent and can only be used once. An expired or already-used link takes you back to sign-in rather than into the account; that is working as intended, not an error with your account.

Opening the link in a different browser from the one that requested it can fail, because the sign-in completes against the browser that started it. Open it on the same device and browser where you typed your address.

An account is its email address, and your projects, findings and subscription belong to the workspace behind it. To work as another address, sign out and request a link for that one — you will get a separate workspace.

The email your invoices are addressed to is separate, and you can change it yourself in the billing portal without affecting how you sign in. See below.

Use Sign out in the top-right of any signed-in page, or on your account page. It ends the session for that browser and revokes the token behind it, so a session captured from that device cannot be resumed.

Your current plan, its status, how many projects you are using and how often they are rescanned are all on the account page. Plans change how many applications are watched and how frequently — never what a scan is allowed to tell you. Findings are never withheld behind a plan.

After a payment, the plan shown is the one our systems recorded when Stripe confirmed the payment to us, which is usually within seconds. If it still reads the old plan a minute after checkout, reload the page. The plan on this page is read from that confirmation, not from the fact that you were redirected back — which is why it can be trusted.

Every payment has a downloadable PDF invoice. Open Manage billing and receipts on the account or billing page. That opens Stripe, our payment processor, where the full invoice history is listed and each entry can be downloaded.

Need a company name, address or VAT/tax number on the invoice? Set them in that same portal under the billing details — invoices issued afterwards will carry them.

The button only appears once there is a payment to show. Before your first payment there is no billing history and nothing for the portal to display.

Same place: Manage billing and receipts → payment methods. Adding a new card and making it default is enough; the next renewal uses it.

If a payment fails, monitoring keeps running while Stripe retries over the following days, and the account page shows Payment failed — retrying. Updating the card during that window resolves it with no interruption. We would rather keep scanning a customer whose card expired than stop watching an application that is still deployed.

Cancel yourself in the billing portal — no email required. Cancellation takes effect at the end of the period you have already paid for, so you keep what you bought until then, and the plan drops to free afterwards.

Cancelling does not delete your projects or findings. The free plan keeps watching one application on a daily schedule.

Email info@useveristria.com from the address on the account, and say what you tried. Billing questions are answered by a person.