Sign-in and account security

Creaton has no password to forget by default. You sign in by proving something you own: your phone, your email or your Google account.

Ways to sign in

• WhatsApp — confirm with a message, or receive a code.
• Telegram — confirm in Telegram.
• SMS — a one-time code to your phone.
• Google — your Google account.
• Authenticator app — a time-based code.
• Email — a one-time code to your address, or a password if you set one in Settings.

Phone and email ownership

A phone number can only be attached to an account by proving it with WhatsApp, Telegram or SMS — it cannot be typed in. Changing your email address sends a confirmation to the new address; the account keeps using the old one until you confirm, and the old address is told about the change.

Passwords

You can add a password in Settings as an extra way in. Changing it signs out every other device.

What we protect

• Social network tokens and your AI keys are encrypted at rest.
• Card details never reach Creaton.
• Staff actions on accounts (approving transfers, adjusting a wallet, granting a month) are logged.

Suspended accounts

An account suspended for breaking the acceptable use policy is signed out everywhere and cannot sign in until the suspension is lifted. Write to support if you think it was a mistake.