Account safety
How to recognise real messages from Veyllo and protect your account.
Our real addresses
- veyllo.app: website, sign-in, dashboard and API. This is the only place you enter your password.
- veyllo.io: the company behind Veyllo.
- Emails from us come from addresses on veyllo.app or veyllo.io, such as noreply@mail.veyllo.app or support@veyllo.app.
Addresses that only look similar are not ours: a capital I instead of a lowercase l, a zero instead of an o, or an add-on like “-login”.
Check an address
The check runs only in your browser. Nothing you enter is sent anywhere.
What we never ask for
- your password
- a two-factor code
- payment details such as a card number or IBAN
Not by email, not by phone, not in chat. Payments only happen in the dashboard through Stripe, or in the app through the App Store and Google Play.
How to protect your account
- Turn on two-factor sign-in. Then your password alone is no longer enough. Set it up now
- Use a password manager. It only fills in your password on the real veyllo.app; on a fake site the field stays empty.
- Use a password just for Veyllo.
- Treat API keys like passwords: never in code, chats or emails. If a key has got out, revoke it in the dashboard right away.
- Check your signed-in devices. Under Account and security you see where you are signed in and can sign out devices you don’t know.
- Be wary of pressure. “Your account will be locked” or “Payment failed” are typical tricks. When in doubt, type veyllo.app yourself instead of clicking a link.
Something looks suspicious?
- Forward the email to support@veyllo.app. Don’t click anything, don’t enter anything.
- Already entered something? Set a new password right away via “Forgot password”, sign out all other devices under Account and security, renew your API keys and write to us.