Account security

Two-factor sign-in, signing out, and how your files are protected.

Your account holds unreleased music, so it's worth two minutes to lock it down.

Turn on two-factor sign-in#

With two-factor on, signing in needs your password and a six-digit code from an authenticator app on your phone.

  1. Go to Settings › Login & Security.
  2. Choose Set up authenticator app.
  3. Scan the QR code with an authenticator app (Google Authenticator, 1Password, Authy and similar all work).
  4. Type the six-digit code. It checks itself after the sixth digit.

You can turn it off again from the same place.

Change or reset your password#

  • Signed in: change it in Settings › Login & Security.
  • Locked out: choose Forgot password? on the sign-in page and follow the email.

Changing your password signs you out on every other device.

Sign out#

Settings › Session & account › Sign out signs out this device. To sign out everywhere else too, change your password.

How your files are protected#

  • Private by default. Your audio, artwork and account data are stored encrypted, in private storage. Nothing sits at a public address.
  • Checked on every play. Each time someone presses play, WAVDROP checks the link and any password or email lock before a note streams.
  • Your links, your rules. You can turn a link off, replace it, or make it expire at any time. See Share links.
  • No training on your music. WAVDROP doesn't use your audio to train AI and doesn't send it to AI services.

More detail is on the Security page, and what we collect is in the Privacy Policy.

Report a security issue#

Found something that looks wrong? Email us from the Security page. Please don't test against other people's accounts or links.

Something unclear or missing? Tell us and we'll fix the page.