Guide 11 of 12
Security and sessions
How sign-in, sessions and two-factor authentication work.
What to know
- Unauthenticated users are redirected to sign-in. The intended route is preserved.
- Sessions are checked periodically. Expired sessions sign you out with a notice.
- Passwords are managed securely, and two-factor authentication is available.
- Download, print, and copy actions run in the browser. Sensitive metadata is shown before you share content.
- For encryption at rest, subprocessors, and infrastructure, see the Security page.
Encryption and infrastructure
The Security page covers encryption in transit and at rest, who can access data, and where it is stored.
Need help with something else? Contact support.