Skip to main content
Your Stealth account gives access to the revenue of every network your organization connects. This page explains the protections available and the ones that are always on.

How it works

Sign-in

  • With an email and password, or with a Google or GitHub account.
  • A password needs at least 10 characters (at most 72), with uppercase and lowercase letters, a number and a symbol.
  • If you signed up with Google or GitHub, you can also set a password in Settings > Security > Set Up a Password.
  • In Connected Accounts, you can link or unlink Google and GitHub. To unlink, the account needs a password first, so you never lose access.

Two-factor authentication (2FA)

Two-factor authentication asks for a 6-digit code from an authenticator app (such as Google Authenticator, 1Password or Authy) at every sign-in. It is optional and strongly recommended. When you turn it on, Stealth gives you 10 backup codes. Each one lets you sign in once if you lose the phone. Using a backup code turns two-factor authentication off and invalidates the other codes, so turn it on again right after.

Verification codes for sensitive actions

Before these actions, Stealth sends a 6-digit code to your email and asks for it:
  • changing the password (except right after a password reset link)
  • changing the email address
  • exporting your data, deleting your account, transferring or deleting an organization
Changing the email address also requires confirming the link sent to the old and to the new address.

Security notices

Stealth notifies you in the app and by email about changes to your account. These always arrive on both channels and cannot be turned off: a password change, two-factor authentication being turned off and a disconnected Google or GitHub account. Two-factor authentication being turned on and a newly connected account follow your Security preference in Settings > Notifications.

Steps

Turn on two-factor authentication

1

Open Security

Go to Settings > Security. In Two-Factor Authentication, choose Enable 2FA.
2

Scan the QR code

Open your authenticator app and scan the QR code.
3

Enter the code

Type the 6-digit code that the app shows.
4

Save your backup codes

Copy the 10 backup codes to a safe place, such as a password manager. They are shown again only if you generate new ones, which replaces the old ones.
To turn it off, sign in completing the 2FA step and choose to disable it in the same card. Turning it off deletes the backup codes.

FAQ

Use one of your backup codes at the 2FA step. That signs you in and turns two-factor authentication off. Turn it on again with your new phone.
Not today. Each person turns it on for their own account.
Write to contato@usestealth.dev with what you found and how to reproduce it. Please do not disclose it publicly before it is fixed.
Last modified on October 13, 2026