Sign in Get started
Solutions
ComplianceDigital ForensicsAccount SecurityWebsite SecurityWeb OptimizationSEO / GEOBusiness IntelligenceUI / UXStartupsDigital TransformationWhite LabelAI Code AuditAI / MLConsulting & AdvisoryBusiness Strategy
Products
Web HostingVPS HostingSSL CertificatesSiteLock SecurityWebsite BackupEmail Spam FilterOX App Suite360 MonitoringWeebly BuilderSite BuilderSEO (Marketgoo)Account SecurityDomainsAll Products
More
NetworkSecurity AboutCareersContactRoadmapLegal
Blog

Keeping your Internetivo account safe

Your Internetivo account holds your projects, your messages and, if you work on the network, your earnings. This guide explains the protections around it, what you will see when something changes, and what to do if something looks wrong.

Four layers that protect your account1. Sign inPasskey or anauthenticator app2. E-mail"Was this you?"on every change3. RecordActivity, Security:kept for you4. FreezeOne click stopsall payouts1. Sign inPasskey or an authenticator app2. E-mail"Was this you?" on every change3. RecordActivity, Security: kept for you4. FreezeOne click stops all payouts
How the protections fit together, from signing in to stopping everything if something looks wrong.

Sign in with a passkey or an authenticator app

A passkey is the strongest way to sign in. It lives on your phone or computer and is unlocked with your fingerprint, your face or your device PIN. A passkey only works on internetivo.com, so a look-alike site cannot use it. You add one on the Security page, under Passkeys, and you can remove one there too.

An authenticator app is the other strong option. It shows a new 6-digit code every 30 seconds. In your authenticator app, the account is named Internetivo.

If you sign in with Google, Apple or Facebook, those links are listed under Linked accounts on the Security page. A password reset keeps them, and the "password changed" e-mail names every linked sign-in, so you can remove any you do not recognise.

"Was this you?" e-mails

We e-mail you when anything about how you sign in changes:

  • your password, a passkey or an authenticator app is added, changed or removed;
  • a Google, Apple or Facebook sign-in is added or removed;
  • your e-mail address changes, in which case we write to the previous address;
  • someone signs in from a browser or phone we have not seen before.

Each of these e-mails carries a link for the moment it was not you. More on that below.

Your security record

Every change to your account is kept in one place: Activity, then the Security tab. Each entry shows what changed and when, how it was made (on the website, in the Internetivo app or through the API), the approximate place and the device.

An entry in your security record, with reminders on day 3 and day 7A passkey was addedA passkey was added to your account.How:WebsitePlace:Approximate, from the connectionDevice:The browser and system usedThis was not you?The notice staysDay 0e-mail, noticeDay 3reminderDay 7reminderMark it read. It cannot be deleted.A passkey was addedA passkey was added to your account.How: WebsitePlace: approximateDevice: browser and systemThis was not you?Day 0Day 3Day 7Reminders on day 3 and day 7Mark it read. It cannot be deleted.
One entry in Activity, Security. Changes made by our staff show "Internetivo staff" under How, with no place or device.

The record belongs to you, and it stays. Nothing in it can be deleted or edited. When you open the tab, the entries are marked read. For each change we also send an in-app notice that cannot be deleted, only marked read, and we remind you about it on day 3 and again on day 7.

If one of our staff changes something on your account, for example while helping you with a ticket, the entry says "Internetivo staff". You always see that staff made the change.

Freeze your account if something looks wrong

Every security e-mail has a link for when it was not you. It opens a page with one button: Freeze my account. The link works even when you are signed out, so it still works if someone has changed your password. A freeze takes effect at once:

  • nothing can be paid out from your account;
  • every app sign-in is ended;
  • your API keys are switched off;
  • website sessions are signed out.

Lifting a freeze is deliberate. Depending on what happened, it takes an ID re-check, a 24-hour wait, a review by our staff, or a mix of these. When someone may have taken over the account, no single staff member can lift it alone. Payouts reopen 24 hours after a freeze is lifted.

Extra checks on money and data

Some actions get a fresh identity check, even when you are already signed in: requesting a payout, adding or changing a payout bank account, changing your password or e-mail address, and requesting a copy of your data. On the website you confirm with a passkey or an approval in the app. The check is valid for about 10 minutes.

If you confirm a payout with an authenticator code instead, that payout waits 72 hours. A passkey you added in the last 72 hours counts the same way.

A data export always waits 72 hours before it is built. Your account e-mail gets a "Was this you?" message straight away, with a one-click Cancel. Only the account owner can request or download an export.

A data export waits 72 hours, with a Was this you e-mail you can use to cancel itNowRequestedfresh identity checkAt onceE-mail"Was this you?"72 hoursBuiltif nothing cancelled itThenDownloadaccount owner onlyA password or e-mail change during the 72 hours cancels the export. The e-mail has a one-click Cancel.NowRequestedfresh identity checkAt onceE-mail"Was this you?"72 hoursBuiltif nothing cancelled itThenDownloadaccount owner onlyA password or e-mail change cancels it.
Why a data export takes three days. A thief who gets in cannot walk away with your data at once.

An example: an e-mail Sofia did not expect

A fictional example. Sofia is a translator who works on the network. One evening she gets a "Was this you?" e-mail about a sign-in from a browser she does not use. She did not sign in. She does not reply to the e-mail and does not call any number. She presses the link in the e-mail and chooses Freeze my account.

From that moment nothing can be paid out, the other session is signed out and her API keys are off. She then types internetivo.com into her browser herself, opens a support ticket and changes her password. In Activity, Security she can see the sign-in, when it happened, the approximate place and the device. Our team reviews what happened before the freeze is lifted.

If you lost your phone

Sign in on the website from another device. On the Security page, remove the passkey that lived on the lost phone. If you think someone may have the phone, freeze your account from the link in any of our security e-mails: a freeze also ends every app sign-in. When the new phone is set up, add a new passkey.

If you cannot sign in

Open a support ticket. You do not need to be signed in: the form at internetivo.com/submitticket.php works for everyone. Pick the department, describe what happened, and give the e-mail address on your account. You can also write to [email protected].

Common questions

Can I delete an entry from my security record?
No. Entries cannot be deleted or edited, only marked read. That keeps the record useful if something ever goes wrong.
Will I know if Internetivo staff changed something?
Yes. The entry shows "Internetivo staff" as how the change was made.
Why does my data export take 72 hours?
So that you have time to stop it if the request was not yours. The "Was this you?" e-mail has a one-click Cancel.
What does a freeze stop?
Every payout, every app sign-in, your API keys and your website sessions. Lifting it takes an ID re-check, a 24-hour wait, a staff review, or a mix of these.

Take two minutes now: open the Security page in your account and add a passkey.