Home / Help / Devices & sign-in security

Devices & sign-in security

4 MIN READ · security

Why we cap at 2 devices

INSTATuner is sold per account, not per machine fleet. Two browsers cover the realistic mix of "workshop bay PC + home laptop" or "desktop + phone". Past that, account-sharing starts to look like fraud and the cap blocks it.

The cap is universal — every tier (Standard, Premium, VIP) shares the same 2-device limit. Higher tiers do not buy more slots; they buy more features.

Browser fingerprint, not hardware ID

We hash a small set of stable browser characteristics — user-agent, screen size, timezone, canvas, WebGL — into a fingerprint. The same browser on the same machine produces the same hash; a different browser counts as a different device.

Caveat: clearing cookies + localStorage in the same browser produces a fresh fingerprint, which counts as a new device. That's why incognito or "fresh start" sessions can hit the cap unexpectedly.

Email confirmation flow

On the first sign-in from a new fingerprint, we send a confirmation email to your account address. Until you click the link:

  • You can browse, search, and read file detail pages.
  • You cannot download files or save editor changes.
  • The link expires in 15 minutes. Sign in again to receive a fresh one (max 5 emails per hour).

Manage active devices

Open Account → Privacy → Registered devices. You'll see every browser that's confirmed to your account, plus any pending ones. Each row shows:

  • Device label (Chrome on Windows, Safari on iOS, etc.)
  • Last-seen IP and timestamp
  • Status: CONFIRMED, PENDING EMAIL, or REVOKED

Click "Revoke" on any row to free a slot. The next sign-in from that browser will trigger a fresh email confirmation.

Auto-revoke after 60 days

Devices that haven't been active for 60 days are automatically revoked overnight. This is so a one-off sign-in from a friend's computer doesn't permanently consume one of your 2 slots.

When you hit 2 / 2

A warning banner appears on every page with a "Manage devices" link. The new browser stays in pending state until you revoke one of the existing two and then click the email confirmation link. There's no override — sharing your password with a third person doesn't grant a third slot.