Account

Accounts, sessions, and security

How TokenLume accounts work: registration, email, sessions, password reset, and basic security.

Registration and login

Create an account with email and password on Register, then Sign in. Authentication uses Better Auth with session cookies. Email verification status appears under Settings.

Password reset is available from Forgot password when outbound email (Resend) is configured for your deployment.

Sessions

A signed-in session is stored in an HTTP-only cookie. Sign out from Settings when using a shared device. Account APIs under `/api/v1/me` require a valid session.

Security basics

Use a unique password
Never paste seed phrases into TokenLume or any “support” chat
Confirm you are on the real TokenLume domain before signing in
Report suspected issues via Contact (Security topic)