# Account & security

Source: https://meptools.com/docs/account/

## Sign-in methods

MEP Tools supports two ways to sign in:

- **Email and password**
- **Google** — from the sign-in page, or from Google's one-tap prompt, which may appear once per
  visit while you are signed out.

There is no other sign-in method. Registration does not accept disposable email addresses.

## Password rules

If you sign in with email and password, your password must be **8–4096 characters**, with at
least one uppercase letter, one lowercase letter, one number, and one special character.

The same rule applies whether you are registering, changing your password, or resetting it
after a "forgot password" request.

## Verify your email

MEP Tools sends a verification email automatically when you register. You can resend it from
the verification banner shown in the app, or from your account page.

Verifying your email matters more than it looks: you **cannot save a project, start checkout,
start a trial, or change your plan** until your email is verified. You can still sign in,
browse, and run any tool while unverified — the block only applies at those four actions. If
something that should work is silently refusing to proceed, check whether your email is
verified first.

## Change your email

If your account uses email and password, you can request a new sign-in email from
[/account](/account). Enter the replacement address and your current password.

You do not need access to the old inbox. This lets you recover when the address
entered during registration was misspelled or unavailable.

The old address remains active until you open the verification link sent to the
replacement address. If the old address was already verified, it also receives a
security notice. Google-only accounts manage their email through Google and do not show
this control.

## Forgot your password

Enter your email on the "forgot password" screen. You will see the **same confirmation message
every time**, whether or not that address has an account. This is deliberate — it stops someone
from using the reset form to probe which email addresses are registered.

If the address is registered, a reset link is sent. The link opens the app's own page, which
also handles email verification and email-change recovery — so the same link destination
covers more than password resets.

## Change your password

Change password is only available for accounts that sign in with email and password. If you
sign in with Google, this option does not appear — there is no local password on your account
to change.

Changing your password asks for your current password first.

## Language, theme, and motion

The gear icon in the header opens settings that also apply when you are signed out:

- **Language:** English or Arabic (the app switches to full right-to-left layout for Arabic).
- **Appearance:** device default, light, or dark.
- **Reduce motion:** turns off non-essential animation.

Language and theme are repeated on the account page.

## Notification preferences

Account settings include three notification toggles, controlling what you want to receive:

- **Email** — receipts, security, and product updates by email
- **In-app** — the bell in the header, and the Activity card on your dashboard
- **Push** — push notifications on your devices

These toggles control your preference, not a delivery guarantee.

The `/notifications` page lists your notification history. From there you can click a
notification to mark it read, mark all as read, dismiss a single notification, or clear all of
them.

## Export your data

Account settings include one export button. Clicking it downloads a JSON file immediately —
there is no email-me-later step. The file is named `account-export-<uid>.json` and contains
your profile, subscription, projects, and notifications.

## Delete your account

Account deletion is at `/account/delete`. Read this section before you start.

**This is immediate and permanent. There is no grace period and no undo.**

To delete your account you must type the word `DELETE` and then confirm in a dialog. Once
confirmed, MEP Tools:

- Cancels your billing.
- Deletes your projects.
- Deletes your subscription record.
- Deletes your notifications.
- Deletes your profile.
- Deletes your sign-in account and signs you out.
- Removes the local copies of your work from the browser you deleted from.

Some records are kept afterwards: security and audit logs, billing and transaction records,
support messages you sent, and anti-abuse signals. The [Privacy Policy](/privacy) says for how
long.

Before you delete:

- **Export your data first** — see [Export your data](#export-your-data) above. Once the
  account is deleted, there is nothing left to export.
- **Cancelling a plan is not the same as deleting your account.** Cancelling stops renewal and
  keeps your projects; deleting removes everything. See [Refunds](/docs/refunds) if you only
  want to stop paying.
- **Signing out is not deletion either** — but it does remove this account's unsaved edits from
  the device. See [What can delete on-device work](/docs/save-status#what-can-delete-on-device-work).

## Related

- [Privacy, cookies & ads](/docs/privacy-ads) — cookie consent, ads, and how your data is used.
- The full [Privacy Policy](/privacy) is the binding legal document.