Skip to main content

Stash help

Account and security

Everything about getting into your account and keeping it yours.

Signing in

You can use an email and password, a Google account, or your Apple account. Use the same one every time: signing in with Google or Apple when you registered with a password creates a separate account, and your comics will not be in it.

The iPhone app uses the same account. Create it on the web first, then sign in on the phone.

Two-factor authentication

Optional, and worth turning on. Under Settings → Profile you scan a code with an authenticator app, then enter a six-digit code to confirm.

Once it is on, every request has to pass it, not just the sign-in screen. A half-finished sign-in cannot read or change anything.

Keep a backup. If you lose your authenticator and have no way to generate codes, you will need to contact support to regain access, and that is deliberately slow.

Forgotten password

Use the link on the sign-in screen. You will get an email with a link back into the app to set a new one. The link expires, so if you come back to it later, request a fresh one. If two-factor is on, you will still need your code.

Sessions

Settings → Sessions lists every device signed in to your account, with a rough location and when it was last used. Ending a session signs that device out. If you see something you do not recognise, end it and change your password.

Workspaces

Your comics live in a workspace, not directly on your user account. When you first sign up you either create one or join an existing one with an invite code.

  • Create if the collection is yours. This is almost everybody.
  • Join if someone has given you a 7-character code.

You can belong to more than one and switch between them from the sidebar. The owner controls billing; members can use everything the plan allows.

Connected apps

If you have connected an AI assistant, it appears under Settings → Connections and you can revoke it there. Revoking takes effect immediately. See AI connections.

Gotchas

  • Google and password sign-in are different accounts unless the email matches exactly. If your collection looks empty, this is usually why.
  • Hide My Email never matches. If you choose it when signing in with Apple, Apple gives Stash a private relay address, so the account can never join one you made with your real email. Choose Share My Email to use an existing account.
  • Invite codes expire after 30 days and are not emailed automatically.
  • Deleting your account is not self-service. Contact us and we will handle it, including the data.
  • Private browsing signs you out when the window closes, because the session cookie goes with it.