Sign in
No password. We email you a link — or a code, if you read email somewhere else.
Is that safe?
The link and the code expire in 15 minutes and work once. The irreversible actions — deleting a project, say — ask for a fresh emailed code even inside a signed-in session, so a stolen browser session is not enough. Tokens for Git and the API live on your account page once you are in.