MeldID

MeldID is a secure TOTP authenticator and a unified account for MELD® products. Add TOTP accounts manually or scan standard QR codes. The encrypted storage is synchronized between MeldID devices. After the initial synchronization, TOTP codes are generated locally and continue to work without an internet connection. MeldID can be used: - with MELD® products; - on third-party websites that explicitly support MeldID or provide a “Sign in with MeldID” button; - with any service that supports standard TOTP QR codes in the `otpauth://` format. Connected products receive only the data and permissions explicitly approved by the user. The MeldID password and TOTP secrets are never shared with connected websites. Sign in with MeldID MeldID allows you to use one unified account to sign in to MELD® products and integrated third-party services. Sign-in confirmation may require approval in the MeldID app. This provides additional protection without sharing the password with the connected product. The MeldID client itself does not require confirmation through the same client during initial registration or sign-in. Password recovery After a recovery request is submitted, a one-time link is sent by email. When the link is opened, the password remains hidden. Until the user taps “Show password,” the password change process does not begin, the current password remains unaffected, and the link becomes invalid after it expires. After the user taps “Show password,” the new password is displayed once. However, it becomes active only after the security delay has ended. A trusted MeldID app can: - activate the new password before the security delay ends; - cancel the recovery process if the request was not made by the account owner. If the recovery process is cancelled, the new password is not activated. Panic mode Panic mode temporarily disables account access in an emergency when there is a risk of compromise or in any other situation where the user needs to suspend access. Before activation, the app displays the exact lockout period set by the server. After two confirmations, panic mode temporarily blocks the use of the account, the MeldID client, and products connected through MeldID. Panic mode: - does not delete the account; - does not delete data; - does not delete TOTP codes; - does not change the password; - revokes active access permissions and sessions; - blocks new sign-ins; - cancels an active password recovery process; - prevents a new password from being activated during the lockout period. After the specified period ends, access is restored through the standard sign-in process. On third-party websites, panic mode works only where the website has actually integrated MeldID and verifies the status of the MeldID session. Websites without MeldID integration cannot be controlled by this mode.