Trusted Devices - Account Security
Trusted devices protect your TidyCal login: a new browser must enter the 6-digit verification code we email you. Manage them in Settings → Trusted devices.
How does device verification work?
Device verification is on by default for every account, on every plan, including the Free Plan.
When you log in from a new or unrecognized device:
- Enter your email and password as usual
- TidyCal detects the new device and sends a 6-digit code to your email, with the subject Your TidyCal verification code is followed by the code
- Enter the 6-digit code on the Enter your code screen and click Verify
- Once verified, the device becomes trusted and won't require verification again
Note: Verification codes expire after 15 minutes. If your code expires, click Resend code to receive a new one.
You are only asked when you log in with your email and password on a browser TidyCal doesn't recognize, and only if your account already has a trusted device.
Do I need a code when I sign in with Google or LinkedIn?
If you log in with Continue with Google or Continue with LinkedIn, TidyCal trusts your device automatically, and no code is needed. See Can't Log In? Reset Your TidyCal Password for signing in with Google or LinkedIn.
Managing Your Trusted Devices
View and manage all devices that have access to your account:
- Click Settings in the navigation menu
- Click Trusted devices in the sidebar
- View your list of verified devices with browser, IP address, and last used time
Device Information Displayed
- Browser and OS - e.g., "Chrome on Windows", "Safari on Mac", "Firefox on iPhone"
- IP Address - The IP address used when the device was verified
- Last used - When you last signed in from that device
- Current Device - A badge indicates which device you're currently using
Can I turn off device verification?
If you need to disable device verification (for example, if multiple people share access to the same account), you can turn it off:
- Go to Settings in the navigation menu
- Click Trusted devices in the sidebar
- Uncheck Require device verification
- Click Save changes
When disabled: New devices will be able to log in without email verification. This is useful for shared accounts but reduces security.
When enabled (default): New devices must verify via a 6-digit email code before accessing your account.
⚠️ Security Note: We recommend keeping device verification enabled unless you have a specific need to disable it. It provides an important layer of protection for your account.
Removing a Trusted Device
If you no longer use a device or don't recognize one in your list:
- Go to Settings → Trusted devices
- Find the device you want to remove
- Click the Remove button next to it (your current device has no Remove button)
- Confirm the removal when prompted
After removal, that device will need to complete verification again on the next login.
Removing All Other Devices
For security purposes (such as a suspected breach), you can remove all devices except the one you're currently using:
- Go to Settings → Trusted devices
- Click Remove all other devices (shown when you have two or more trusted devices)
- Enter your password to confirm (for security)
- Click Remove all other devices
Note: If you signed up using Google Sign-In only (no password set), you can remove all devices without password confirmation.
Removing a device doesn't sign out a session that is already open on it. To end every other session, reset your password: that logs you out everywhere else.
Security Features
- Rate Limiting - Too many incorrect code attempts will temporarily lock verification to prevent brute-force attacks
- Code Expiration - Verification codes expire after 15 minutes for security
- Secure Storage - Verification codes are securely hashed and cannot be retrieved
- Password Protection - Bulk device removal requires password confirmation
Troubleshooting
Not receiving the verification code
- Search your inbox, including spam/junk, for Your TidyCal verification code is (the code is in the subject line).
- The Enter your code screen shows the address the code was sent to (partly hidden). Check it is the address you can reach.
- Click Resend code on the verification screen. You can request up to 3 new codes per hour; after that you see Too many resend requests. with the minutes to wait.
Verification code not working
- That code isn't right. Check your email and try again. means the code was mistyped or is an older one. Use the most recent code if you requested several.
- That code has expired. Request a new one below. means more than 15 minutes have passed. Click Resend code.
- Too many verification attempts. means too many wrong codes were entered. Wait the time shown, then try again.
Can't find Trusted devices
Log in, click Settings in the sidebar, then Trusted devices in the Settings menu. See How to Change Your TidyCal Account Settings.
Don't recognize a device in the list
Remove the unrecognized device immediately using the Remove button. Then reset your password: log out, click Forgot your password? on the login page and follow the email (see How to change your TidyCal account email or password). Resetting your password also logs you out of all other sessions.
Frequently Asked Questions
Will I need to verify every time I log in?
No. Once a device is verified, it remains trusted. You'll only need to verify again if you clear your browser cookies, use a different browser, or your device is removed from the trusted list.
What counts as a new device?
Each browser gets a random device token stored in a cookie. A different browser, a private window or cleared cookies counts as a new device; browser updates and IP address changes do not.
Does this affect my booking pages?
No. Device verification only applies when logging into your TidyCal account. Your guests can book appointments without any verification.
What happens if I lose access to my email?
New browsers and password resets need that inbox: TidyCal sends verification codes and password reset links only to your account email. A browser you have already verified still signs in without a code, so while you are signed in there you can change your email in Settings → Profile to an address you can reach (see How to change your TidyCal account email or password). Otherwise, contact TidyCal support at support@tidycal.com (see How do I contact TidyCal support?).