Skip to main content
Craft provides several secure authentication methods to protect your account and content.

Available Authentication Methods

Craft currently supports three authentication methods:
  • Email verification: Receive a one-time code to your email address
  • Apple ID: Sign in with your Apple account
  • Google Authentication: Sign in with your Google account
Craft uses email-based login with one-time verification codes instead of passwords, which helps reduce exposure to phishing and common security breaches.

Email Changes with Sign in with Apple

If you sign in with Sign in with Apple and later change the email address on your Apple ID, or use Apple’s Hide My Email relay, Craft may not recognize it as the same account and can create a new, separate account instead of signing you into your existing one. If this happens and you end up with a duplicate account:
1

Contact support

Email support@craft.do with both email addresses: the one on your original account and the one that was just created.
2

We help you identify the right account

Craft accounts cannot be merged, but we can confirm which account holds your content and subscription so you can sign back in with the correct address.
If you use Sign in with Apple, avoid changing the email on your Apple ID or toggling Hide My Email unless necessary, since it can affect how Craft matches you to your existing account.
If your documents seem to be missing after signing in, see Multiple Accounts.

Signing Out of a Lost or Shared Device

Craft does not currently have a screen that lists the devices signed in to your account, and you cannot end an individual session yourself. If you need to remove access from a device you no longer control, we can sign the account out everywhere for you.
1

Contact support

Email support@craft.do from the address on your account and ask us to sign out all devices.
2

Allow a few hours

The sign-out can take up to a few hours to reach every device.
3

Sign back in where you need to

This signs out every device on the account, including the ones you still use, so sign back in with a fresh login code afterwards.
Craft signs you in with a one-time code sent to your email rather than a password, so someone using your device cannot discover a reusable credential for your account.
Signing out remotely prevents future access to your account, but it cannot delete copies already stored on that computer or phone. For a lost Mac, iPhone or iPad, use Find My to lock or erase the device. A device passcode and full-disk encryption, such as FileVault on macOS, are what keep the local copies unreadable.

App Lock on iOS and iPadOS

On iOS and iPadOS devices, you can add an extra layer of security by locking the entire Craft app with biometric authentication:
1
Open Craft and go to your profile settings
2
Select Security
3
Enable Lock Craft with Touch ID/Face ID
Once enabled, you’ll need to authenticate with Touch ID or Face ID each time you open the Craft app.

Document-Level Protection

Currently, Craft does not support setting passwords for individual documents. However, this feature is on our roadmap. For now, you can:
  • Use app-level locking on iOS/iPadOS (as described above)
  • Control document access through sharing permissions
  • Use passcode protection for published web pages

Future Authentication Options

We’re planning to add more authentication options and security features. Check back for updates or follow our release notes for announcements about new security capabilities.

Encryption and Data Protection

Learn how Craft protects your data

Data Storage

Understand where and how your data is stored

Document Locking

Protect documents from accidental edits