Log in
Three fields. Verified together. No email needed here — just the three things you know.
What happens when I press Authenticate?
Why no email on this page?
Email is only used for recovery — to prove you own the account if you lose access. For login, all you need are the three things you know: nick, ID.me, and password. Less fields = less attack surface.
Why can't my browser save ID.me?
The ID.me field has autocomplete turned off — browsers won't offer to remember it. That's intentional. ID.me is the one piece that stays only in your head. Your password can live in a password manager. Your nick is visible. But ID.me is the secret that an attacker can't find in any saved file, browser storage, or leaked database. Two memorisable things: your ID.me and the fact that you have one.
What changes in the database after I log in?
Every successful login triggers a full rotation:
After you log in, you'll see the dashboard showing the before and after — proof that the rotation happened. A database snapshot from five minutes ago is already stale for your account.