Keep your account secure
How sign-in works, how to sign out other devices, and how to report a security problem.
No password to leak
QRdx has no passwords. You sign in with Google, GitHub or a one-time code sent to your email.
That makes your email account, and your Google or GitHub account, the keys to QRdx. Turn on two-step verification for them.
QRdx doesn't have its own two-step verification (2FA) or passkeys.
Sign out other devices
Go to Settings → Account. Under Sessions, sign out of one device, or click Sign out everywhere else.
Remove apps you connected
If you let another app use your QRdx account, it's listed under Settings → Authorized apps. Remove any you don't use.
Sensitive actions need a code
Deleting your account asks for a code sent to your email. Changing your email address needs a recent sign-in and a code sent to the new address.
Report a security problem
Email support@qrdx.dev with a subject starting [security]. Please don't post it in public GitHub issues. See the security policy.
A harmful QR code isn't a security bug: report it instead.
Last updated on