Security

Everything Tidy offers to protect your account and your emails.

Two-step verification

When it's on, signing in asks for a code from the authenticator app on your phone (e.g. Google Authenticator, 1Password) as well as your password. Keep the recovery codes you get during setup somewhere safe; they let you in if you can't reach your phone.

Sign out of all devices

All sessions except the device you're using are closed. If you think someone else may know your password, change it first, then use this.

Move scam emails to Junk

When it's on, illegal betting, account-renting, blackmail and fake-institution emails and emails with harmful links are moved to the Junk folder on your mail server too, so you won't see them in your phone's mail app either. When it's off, these emails stay only in Tidy's Suspicious section.

Tidy also checks links against the list of USOM, Türkiye's national cyber incident response centre; the list is updated several times a day.

Sensitive data warning

When you send an ID number, card number, IBAN, a copy of an ID or a password, Tidy warns you before sending. In a Business account an admin can also require such emails to be approved before they leave the company.