> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dfine.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Signing in and security

> Fixes for signing in, guest email confirmation, session timeout and folder protection in Review.

Account sign in runs through Clerk, our identity provider. Guests at a share confirm an email address instead. Sessions time out after inactivity, and you control how long.

<AccordionGroup>
  <Accordion title="I cannot sign in to my account" icon="log-in">
    The sign in screen, passkeys and single sign-on are handled by Clerk, so any error text you see there comes from Clerk rather than from Review. Use the email and password route if a passkey fails on your device, and reset your password from the same screen.
  </Accordion>

  <Accordion title="I did not get my guest confirmation code" icon="mail">
    When you comment at a share as a guest, Review emails you a code to confirm the address. Check your spam folder and request a new one, which you can do about once a minute. If you try too often you see **"Too many requests. Please wait."**, and on the code entry itself **"Too many attempts. Please wait."**
  </Accordion>

  <Accordion title="My session keeps expiring" icon="clock">
    Sessions time out after a period of inactivity and you then see **"Session expired. You have been logged out."** You can change the timeout, from 15 minutes up to 24 hours, under **Settings**, **Security**. You get a warning two minutes before a session ends.
  </Accordion>

  <Accordion title="Folder protection warning" icon="folder-lock">
    When you turn folder protection off you see **"Protected folders will become accessible without password, including public shares."** The switch bypasses the password prompt, it does not delete any password. Turn it back on and every folder asks again.
  </Accordion>

  <Accordion title="I forgot a folder password" icon="key-round">
    A folder password cannot be recovered. The account owner can reset the default folder password under **Settings**, **Security**, which clears it across their own projects. Folders that carry their own password are not covered by that reset.
  </Accordion>
</AccordionGroup>

<Card title="Still stuck?" icon="life-buoy" href="mailto:support@dfine.io">
  Write to [support@dfine.io](mailto:support@dfine.io) and we will help you out.
</Card>