The platformSecurity and sign-in
Passkeys, SSO, and two-factor, on by default.
Breached-password protection, session controls, privacy presets, and a recovery system for everything.
TWO-FACTOR ADOPTION
Members with two-factor or a passkey78%
| Breached-password blocking | Always on |
| New-device sign-in alerts | On |
| Two-factor enforcement | Prompted |
| Session auto-logout | 30 days |
Sign-in
Passkeys: fingerprint, face, or PIN. Phishing-resistant, on by default
SSO with Google, Microsoft, any OIDC provider, and Clever
A test sign-in shows what the provider sends, no account created
Two-factor by app, email, or text: optional, prompted, or required
Always-on protection
Breached passwords refused, with a live warning while typing
New-device alerts and automatic sign-out after a set time
Kiosk-safe sign-out clears carts and payment state
Identity verification: photo-ID and SSN checks through Stripe Identity, and documents never touch the platform
Recovery
Dozens of record types in one recovery page, with restore on each
Member and financial records are never auto-purged
Privacy presets reach every list, picker, and search, including forums and leaderboards
Secrets encrypted at rest, strict content security policy
Alpha Portal vs typical site accounts
| Alpha Portal | Typical site accounts | |
|---|---|---|
| Passkeys | Included | Rare |
| SSO including OIDC and Clever | Included | Enterprise tier |
| Breached-password blocking | Always on | No |
| Two-factor with enforcement modes | Included | Basic |
| Universal recovery trash | Included | Partial |
| Member privacy presets | Included | No |
Every plan includes a real human: a named contact, same-day replies, and help getting set up. We support your users too.