Basic and strong sessions

Mnemonica has two kinds of session. How you sign in decides which one you get:

• Basic session: you sign in with an email link, Google or Apple. You can work in all Projects that are not marked Strong.
• Strong session: you sign in with a strong method, which is a passkey or the Mnemonica app. You can also open Strong Projects and manage your company.

You do not need a strong session to work in Projects that do not require one.

To sign in, read Signing in to Mnemonica.

What each session lets you doCopy Anchor Link

An email link proves only that you can read the mailbox. Google or Apple proves only that you can open that account. Mnemonica cannot see how well that mailbox or account is protected, so these sessions are basic. A passkey or the Mnemonica app is a proof that Mnemonica checks itself, each time. These sessions are strong.

If you sign in tomorrow with an email link, Google or Apple, you start in a basic session. A strong session you had before does not continue.

Protect your first deviceCopy Anchor Link

You get strong sessions in two stages. First, you protect your first device, usually when you register. Then that device makes your sessions on other devices strong.

Mnemonica asks you to protect your first device when you register, in the step called Protect your account. See Registering your Mnemonica account.

• In the Mnemonica app (recommended): tap Enable biometrics. Biometrics uses the way you unlock your phone: your fingerprint, your face or your PIN. Your session is strong at once.
• On a computer that only you use: add a passkey.
• On a shared computer: do not add a passkey. Install the Mnemonica app and scan the QR code.

Your first strong method is active at once.

Add your first strong methodCopy Anchor Link

If you clicked Later when you registered, do it now. Do this only if your account has no active strong method.

You can connect or disconnect your Google and Apple accounts in the Connected accounts tab of Preferences / Security. Mnemonica sends you an email when you connect one.

Make your other sessions strongCopy Anchor Link

You can be signed in on several devices at the same time, and each device, and each browser, has its own session. When you sign in on another device with an email link, Google or Apple, the session is basic. A strong device that you already have makes it strong. A basic session cannot do this alone. This stops somebody who reads your inbox from adding a device of their own. An email link, Google or Apple never replaces a strong device.

How easy this is depends on the device.

On your phone or tabletCopy Anchor Link

If you enabled biometrics on this device, open the app and unlock it with your fingerprint, face or PIN. The session is strong.

If biometrics is not enabled in the app yet, and your account already has a strong method, use a one-time code:

1. In a strong web session, open Preferences / Security. In the API keys and devices tab, click Link the Mnemonica app. Mnemonica shows a one-time code. On a strong phone, open Preferences / Security in the app and tap Link another device.
2. In the app on the new device, select I have a code. Type the code. Tap Link this device.
3. Make sure that the app shows your name.
4. Tap Enable biometrics. Use your fingerprint, face or PIN.

See Add a device.

On a MacCopy Anchor Link

On a Mac, a passkey works with Touch ID, so this is almost as easy as on a phone.

If you saved a passkey on your iPhone in iCloud Keychain, it can already be on your Mac. You then do not need to do anything: sign in with the passkey.

If not, do this one time:

1. Open the sign-in page. Scan the QR code with the Mnemonica app. Your session is strong.
2. Mnemonica asks: Is this your personal computer? Click Yes, only I use it.
3. Save the passkey with Touch ID. You can keep it in iCloud Keychain or in a password manager such as 1Password or Bitwarden.

The next time, sign in with the passkey.

On a Windows computerCopy Anchor Link

Windows computers are often shared, for example at the office. First, decide if only you use the computer.

If only you use the computer, do this one time:

1. Open the sign-in page. Scan the QR code with the Mnemonica app. Your session is strong.
2. Mnemonica asks: Is this your personal computer? Click Yes, only I use it.
3. Save the passkey with Windows Hello, or in a password manager such as 1Password or Bitwarden.

Windows Hello can use a PIN if the computer has no fingerprint reader or face camera. The next time, sign in with the passkey.

If other people use the computer, read this first:

Then, each time that you sign in:

1. Open the sign-in page. Scan the QR code with the Mnemonica app. Your session is strong.
2. Mnemonica asks: Is this your personal computer? Click No, others use it too. Mnemonica saves nothing on the computer.

You can also use a security key instead of the app.

For all the routes, for example an iPad from your iPhone, see Add a device.

If you lose a deviceCopy Anchor Link

The right action depends on what you still have.

• You have another strong device. You do not need a reset. Sign in with that device. Then remove the lost device in Preferences / Security. For a computer, delete its passkey in the Passkeys tab. For a phone, revoke its key in the API keys and devices tab.
• You have no strong device. You can sign in with an email link, Google or Apple, but only with a basic session. A basic session cannot remove one lost device or add a new one. Start a reset. Read Lost device and reset.

A reset removes all your strong methods and API keys at once. It also unlinks Google and Apple, and ends your sessions on every other device. For the next 24 hours, you can use basic sessions only. After 24 hours, you can add a brand new strong method.

We recommend two strong methods: the Mnemonica app on your phone and a passkey on your computer.

QuestionsCopy Anchor Link

Do you need help?Copy Anchor Link

If you cannot sign in, write to support@mnemonica.com.