Version 2.9 guide

Version 2.9 makes your account safer and easier to use. In short:

• Passkeys: sign in with your fingerprint, face or device PIN, and manage the list of devices you have added.
• Magic link: sign in with a one-time link sent to your email, no password needed.
• Verification codes: a code sent to your email confirms it is really you before sensitive changes.
• Email verification: existing accounts are asked to confirm their email address once.
• Reset page: the password reset email now opens a Crafters Apex page where you choose a new password.
• Automatic sign-out: when your session expires, every open page signs you out by itself.
• Safer sessions: your session credential is stored in a protected cookie that page scripts cannot read.

Everything lives in the Dashboard. Open it from the top menu with Dashboard after you sign in, then use the left sidebar.

The sign-in page has three ways to enter. Pick the one that suits you:

• Username and password: the classic form. Use Forgot password? if you cannot remember it.
• Passkey: the Passkey button. No username or password to type.
• Magic Link: the Magic Link button. We email you a one-time link.
• Discord, GitHub or Google: the buttons under Or continue with.

If you already have a valid session and open the sign-in or register page, you are sent straight to your Dashboard.

A passkey replaces your password with something you already have: your fingerprint, your face or your device screen lock. The secret never leaves your device.

Add a passkey

1. Go to Dashboard › Settings › Privacy & security and open the Passkeys card.
2. Press Manage passkeys. A window shows the passkeys you already have.
3. Press Add a passkey.
4. We email you a verification code. Type it in the window that appears (see Verification codes).
5. Your device asks for your fingerprint, face or PIN. Approve it.
6. The new passkey appears in the list.

See your passkeys

The Manage passkeys window lists every passkey with the date it was added and when it was last used.

Remove a passkey

1. Open Manage passkeys and press Remove next to the passkey.
2. Confirm the removal and enter the verification code we email you.
3. The passkey disappears from the list and can no longer be used to sign in.

Sign in with a passkey

1. On the sign-in page press Passkey.
2. Choose your account if your device asks, then approve with your fingerprint, face or PIN.
3. You arrive at your Dashboard.

A magic link signs you in without a password. It is a single-use link sent to the email linked to your account.

1. On the sign-in page press Magic Link.
2. Enter your email address and press Send magic link.
3. Open the email from Crafters Apex and press the sign-in button.
4. You are signed in and taken to your Dashboard.

Before a sensitive change we send a numeric code to your account email. We ask for it when you:

• change your email address,
• change your password,
• add or remove a passkey,
• verify your email from the Dashboard banner.

How it works

1. You start the action. A window says we sent a code to your email.
2. Open your email, copy the code and type it into the window, then press Verify.
3. Once verified, the action continues.

• Resend: you can request a new code one minute after the previous one.
• Attempts: after 5 wrong codes, verification pauses for about 10 minutes.
• Password changes: the verification stays valid for 10 minutes and works for a single password change.

Existing accounts are asked to confirm their email address once. This proves the address is yours, so we can reach you and protect your account.

1. Sign in and open the Dashboard. A banner at the top reads Verify your email address.
2. Press Verify now.
3. Enter the code we send to your email.
4. The banner disappears and your account is marked as verified.

Your email is used for sign-in links, verification codes and account notices.

1. Go to Dashboard › Settings › Privacy & security. The Email address card shows your current email.
2. Press Change email.
3. Enter the verification code we send to your current email.
4. Type your new email address in the window and press Send confirmation.
5. We send a confirmation message to both your old and your new address. Open the link in each one.
6. After both are confirmed, sign in again with the new address.

1. Go to Dashboard › Settings › Privacy & security and find Change password.
2. Enter your current password, the new one (at least 8 characters) and repeat the new one.
3. Press Update password.
4. Enter the verification code we email you.
5. You see Password updated.

1. On the sign-in page press Forgot password?.
2. Enter the email linked to your account and press Send.
3. Open the email Reset your password and press the button. Check spam if it is not in your inbox.
4. A Crafters Apex page opens with Choose a new password. Type it twice and press Update password.
5. Go back to the sign-in page and sign in with your new password.

The reset link works once and expires after a short time. If you see This link has expired, request a new one from the sign-in page. Password resets only start from the Forgot password? button.

These two options are shown in Dashboard › Settings › Edit profile and are marked Not available for now.

• Profile photo: coming soon. You will be able to upload an image that appears next to your name.
• Description: coming soon. You will be able to write a short text about yourself.

You can already change your name in the same screen: edit the Name field and press Save changes.

• Protected session: when you sign in, we store your session in a secure cookie that page scripts cannot read.
• Expiry: a session lasts a limited time, typically up to one hour. When it expires, any open page signs you out by itself and sends you to the sign-in page. You do not have to reload or press Log out.
• Already signed in: opening the sign-in or register page while your session is valid takes you directly to the Dashboard.
• Several tabs: if you log out in one tab, the other tabs sign out too.
• Log out: the Log out button in the sidebar ends the session on our server as well, not only in your browser.

The email does not arrive

• Look in spam, junk and promotions, and search for Crafters Apex.
• Wait a minute and request it again. Codes and links can be resent after 60 seconds.
• Make sure you typed the email linked to your account.

The code is invalid or expired

• Use the newest email. Older codes stop working when a new one is sent.
• After 5 wrong attempts, wait about 10 minutes.

The reset or confirmation link says it has expired

• Links are single-use. Request a new one from the sign-in page, or repeat the email change from Privacy & security.

My passkey does not appear when I sign in

• Use the same browser or device where you created it.
• Make sure screen lock, fingerprint or face unlock is enabled on your device.
• Sign in another way and add the passkey again from Manage passkeys.

I was signed out suddenly

• Your session expired. Sign in again and you will continue where you left off.

Still stuck? Contact us and tell us which step fails.

• Add a passkey on each of your devices.
• Never share verification codes. Crafters Apex staff will never ask you for one.
• Use a unique password you do not use anywhere else.
• Log out on shared or public computers.
• Keep your email account secure, because it can reset your Crafters Apex password.