Account Security

How your account is protected

• No password — eliminates password-related attacks
• Magic links are single-use and expire in 10 minutes
• OAuth (Google/Microsoft) — handled by trusted providers, never stored on our servers
• Sessions expire after 30 days of inactivity
• All traffic is encrypted via HTTPS

If you think your account was accessed by someone else

1. Secure the email account you sign in with — VocalLab has no password, so access to your inbox (or your Google / Microsoft account) is what protects your VocalLab account
2. Contact support right away with details, and we'll help you secure the account

Suspicious activity

If you notice unusual activity (unrecognised generations, plan changes), check your Usage history under Billing in Studio and contact support with details.

Email security

• We will never ask for your password (we don't use them)
• We will never ask you to share a magic link
• Legitimate VocalLab emails come from @vocallab.ai domains only

Data we store

See our Privacy Policy for full details on what data we collect and how it's used.