Keeping your account secure without a password
Jinu has no password, so there is no password to guess, reuse or leak. You sign in with a one-time link emailed to you, or with Continue with Google or Continue with Apple.
The one thing never to forward
The sign-in email. It contains a link and a numeric code, and either one signs somebody in as you. Anybody holding it can read your messages, see your details, and post as you.
Nobody at Jinu will ever ask you to forward it, read the code out, or paste it into a chat. Anyone who does is not from Jinu, whatever the message looks like. The code exists for one situation only: the link opened in the wrong browser, so you type the code into the browser you started in.
Why passwordless is safer here
Most account takeovers start with a password that was used somewhere else and turned up in a breach. There is nothing here to reuse. A sign-in link is single use and short lived, so an old email in your inbox is not a spare key.
Your email account is now the front door
Because sign-in goes through your inbox, whoever controls your email can sign in to Jinu. Two things follow:
- Turn on two-factor authentication with your email provider. It is the single most valuable thing you can do for your Jinu account.
- Use the same care with Google or Apple sign-in: whatever protects that account protects this one.
Check where you are signed in
Go to Settings and open Devices & sessions. It lists the devices currently signed in to your account and marks the one you are using. Sign out anything you do not recognize.
If you think somebody else has access
- Secure the email account first, including changing its password and turning on two-factor authentication. Doing Jinu first accomplishes nothing while they still hold the inbox.
- Sign out the sessions you do not recognize in Devices & sessions.
- Tell us through /contact, and email safety@jinu.app if anything has been sent to other members from your account.
Other things worth knowing
You have to be 18 or older to use Jinu at all. The Terms of Service put the floor on using the service, browsing included, not only on holding an account. Signing in with Google and separately with an emailed link creates two separate accounts if the addresses differ, so listings, messages and settings will not be shared between them.