> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mumtalakat.sa/llms.txt
> Use this file to discover all available pages before exploring further.

# Account Security

> Available sign-in methods, passkeys and recovery codes, managing devices and sessions, multi-account switching, and deleting your account.

Everything about signing in and protecting your account lives in **Settings → Security**, and everything about your personal data in **Settings → Account**.

## Sign-in methods

<CardGroup cols={2}>
  <Card title="Email and password" icon="envelope">
    The primary method, with password recovery.
  </Card>

  <Card title="Magic link" icon="paper-plane">
    Sign in without a password through a link sent to your inbox.
  </Card>

  <Card title="Google and Apple" icon="google">
    Sign in directly with your provider account.
  </Card>

  <Card title="X" icon="x-twitter">
    Sign in with your X account.
  </Card>
</CardGroup>

## Passkeys (two-factor)

Two-factor authentication on Mumtalakat uses **passkeys** rather than SMS codes: your fingerprint, face, or device lock.

<Steps>
  <Step title="Enrol a passkey">
    From **Settings → Security → Passkeys**. You can enrol more than one device.
  </Step>

  <Step title="Save your recovery codes">
    After the first passkey, **ten one-time codes** are shown once only — keep them somewhere safe.
  </Step>

  <Step title="Verify when asked">
    After a normal sign-in you are asked to verify with your passkey before sensitive actions.
  </Step>
</Steps>

<Warning>
  Ending sessions on your other devices requires an **enrolled passkey** and verification with it first.
</Warning>

## Devices and sessions

* **Active devices**: every open session (device, browser, last activity, partially masked IP), with the option to end one session or all the others.
* **Activity log**: your last 50 security events — sign-ins and sign-outs, password or email changes, passkey enrolment or removal, and session revocations.
* **Automatic sign-out**: after **8 hours of inactivity** your session closes, with a warning a minute before that lets you stay.

## Multiple accounts

From the top bar choose **Add account** to sign in to another account without leaving the first, then switch between them in one tap. The limit is **five accounts** per device.

## In the iPhone app

* **Face ID sign-in**: signs you back in after signing out, without typing your password.
* **App lock**: protects an already-open session if you leave your device.

## Deleting your account and exporting data

From **Settings → Account** you can export your data (a right guaranteed under the Saudi personal data protection law), or request account deletion by typing a confirmation word.

<Note>
  After you request deletion, your account is scheduled for removal with a **30-day restore window** before it is permanently deleted. If you signed in with Apple, you are asked to re-authenticate first.
</Note>

## Next step

<CardGroup cols={2}>
  <Card title="Security & data protection" icon="lock" href="/en/reference/security-privacy">
    How your data and deal documents are stored and your legal rights.
  </Card>

  <Card title="Notifications & email" icon="bell" href="/en/reference/notifications">
    Set what reaches your inbox.
  </Card>
</CardGroup>