ID connects from other accounts

For a PC registered to your account, accounts other than yours can also ask to connect with the ID and that PC's device password. They get in only when someone at the PC allows it, and the connection request window shows that account's email as verified by the server. Your own account (the owner) still connects directly from My devices.

This chapter does not apply to unregistered PCs (PCs that take a one-time password).

In the connection request window

When another account asks to connect, the connection request window shows:

• That account's email and avatar (the first letter of the email), and "Verified by the server"
• First time or Trusted: whether this email is on the trusted list
• Add as a trusted email: Check this and allow to add the email to the trusted list.
• Block: Rejects and adds the email to the blocked list. The server refuses blocked emails from the start.

Who can ask

Choose one of two for each PC.

• Any email — ask in the prompt (the default): Anyone logged in can ask, and they get in only when allowed at this PC.
• Trusted emails only: The server refuses emails not on the list at once. Emails on the list still get the connection request window.

A PC that runs only as a service without a window (a Linux server, for example) has no one to answer the prompt, so only emails on the trusted list get in and the rest are declined.

Managing the lists

You can change the trusted list and the blocked list in two places; either way, it is the same list.

On the web: On the card in My devices, press Trusted emails (or n trusted). Enter an email and press Add, or use Remove and Unblock in the list. Below, under Requests from other emails, choose Ask in the prompt or Refuse at once.

In the host app: Do the same in the host window under Settings › Access rules.

Stopping repeated requests and password guessing

• If the same email enters a wrong password 3 times, that email cannot connect for 10 minutes. It grows with each further wrong attempt (up to 1 hour).
• If other accounts together enter a wrong password 10 times in a row, all connections from other accounts are blocked for a while.
• These locks do not affect the owner's unattended access.
• A rejected email is refused without a connection request window for 1 minute, and the wait grows each time it is rejected again (up to 1 hour). Allowing it resets this.
• Only one connection request window opens at a time.

For an account that keeps bothering you, use Block, or switch to Trusted emails only. Every attempt is kept, with the email, in the host window under Settings › Connection history.