Account Security
Keep your account secure: passwords, sign-in methods, and sessions.
Your Kalima account holds your conversations, transcripts, and recordings, so keeping it secure matters. This page explains how passwords, sign-in methods, and sessions work, and the protections Kalima runs in the background to keep your account safe.
Sign-in methods
You sign in to Kalima one of two ways, depending on how you created your account. The first is an email and password you set and control, which you can reset any time from the login page. The second is Continue with Google, a one-click sign-in through your Google account with no separate Kalima password to manage.
Your account uses one method, fixed at signup. If you created your account with Google, there is no Kalima password to set or reset, so you always sign in with Continue with Google. You can see which method your account uses under Account and Security on the Profile tab of your account dialog.
Not sure which method you used? Open your account dialog, go to the Profile tab, and look under Account and Security. It shows your email, its verified status, and whether you sign in with Email and Password or Google.
Password requirements
When you sign up with email, or when you reset your password, Kalima requires a password that meets all four of these rules. The form shows each one turning green as you satisfy it.
| Requirement | Detail |
|---|---|
| Length | At least 8 characters |
| Uppercase | At least one uppercase letter (A to Z) |
| Lowercase | At least one lowercase letter (a to z) |
| Number | At least one digit (0 to 9) |
For stronger protection, go beyond the minimum. Use a longer passphrase, avoid reusing a password from another site, and store it in a password manager.
Reset a forgotten password
If you signed up with email and password, you can recover access yourself without contacting support.
A few things to know:
- Reset links expire after 1 hour, and each link can be used only once. If yours has lapsed, start the Forgot password flow again to get a fresh one.
- You can request a reset up to 3 times per hour.
- Completing a reset also marks your email as verified.
- Google accounts have no Kalima password, so the Forgot password flow does not apply. Just use Continue with Google.
For privacy, the Forgot password page always shows a success message even when no account matches the email you entered. This prevents anyone from discovering which email addresses are registered with Kalima.
How long you stay signed in
A sign-in session lasts up to 7 days, after which Kalima asks you to sign in again. Your session is re-checked periodically while you use the app, so if your account is deactivated or deleted, you are signed out automatically.
This applies across the web app and the desktop app, which share the same account.
Sign-in protection
Kalima runs several protections automatically to keep your account safe. You do not configure these, since they work in the background. After 5 failed sign-in attempts, the account is temporarily locked for 15 minutes. A quick automated challenge on signup, login, and password reset confirms you are a real person. Repeated requests such as password resets and verification emails are rate-limited to block abuse.
Account lockout
After 5 failed sign-in attempts, your account is locked for 15 minutes as a protective measure. A successful sign-in clears the lockout. If you have forgotten your password, the fastest path back in is to reset it rather than waiting out the timer.
Signing out and shared devices
When you sign out, Kalima clears the app data cached locally on that device, so the next person who uses the browser or computer cannot see your sessions or transcripts.
On a shared or public computer, always sign out when you are done. Closing the browser tab is not the same as signing out. Signing out is what clears your locally cached data from the device.
Security best practices
A few habits keep your account safe:
- Use a long, unique password (or sign in with Google, which Google secures for you).
- Never reuse your Kalima password on other sites.
- Sign out on shared or public devices.
- Keep your email account secure, since it is the recovery path for your Kalima password.
- Verify your email so account-protection and recovery features stay available.
Frequently asked questions
After 5 failed sign-in attempts, an account is temporarily locked for 15 minutes to protect it. Wait and try again, or reset your password from the Forgot password link if you have forgotten it. A successful sign-in clears the lockout.
A sign-in session lasts up to 7 days, after which you will be asked to sign in again. If your account is deactivated or deleted, you are signed out automatically.
Google accounts do not have a Kalima password, so there is nothing to reset and no reset email is sent. Just select Continue with Google on the login page to sign back in. If you have trouble, the issue is with your Google account, not Kalima.
Password reset links last 1 hour and can be used only once. Start the Forgot password flow again from the login page to get a fresh link, then complete it promptly.
For email and password accounts, use the Forgot password flow from the login page to set a new password. Completing it rotates you to a stronger password. Google accounts manage credentials through Google.
This is usually caused by a privacy extension or network interference. Refresh the page and complete the check again, and temporarily disable interfering browser extensions if it persists.