Skip to content
TraceFast Docs

Account & Security

Sign in to TraceFast →

Signing in — no passwords

TraceFast is passwordless by design: there is no password to create, remember, or leak. The sign-in page offers three ways in:

TraceFast sign-in

  • Email code — enter your email and we send a one-time code; type it in and you're signed in. No account state lives in the code: it's single-use and short-lived.
  • Passkey — sign in with your device's built-in authentication (Face ID, Touch ID, Windows Hello, or a hardware security key). Passkeys are phishing-resistant: they only work on the real TraceFast domain.
  • GitHub — one click if you prefer to reuse your GitHub identity.

All three methods lead to the same account — pick whichever suits the moment.

Before a code or a sign-in link is sent, the page runs a short automatic check that you are a person, not a bot. Usually you don't need to do anything; if the check can't finish, reload the page and try again.

Creating an account

Choose Sign up on the sign-in page. Enter your email (your first and last name are optional) and confirm it with a one-time code, or continue with GitHub. There is no password step — that's intentional, not an omission. Once you're in, you can add a passkey under Security in the account menu.

To create an account you accept the Terms of Service and the Privacy Policy: tick the box on the sign-up form — the GitHub button works once it is ticked. Each published version of these documents carries its date and a fingerprint (sha256) at the top of the page, and TraceFast records which exact version you accepted.

Two-factor authentication (2FA)

For email-code and GitHub sign-ins we recommend adding a second factor. Open Security from the account menu, then Two-Factor Authentication. The same page manages your passkeys.

  • Authenticator app (TOTP) — scan the QR code with 1Password, Google Authenticator, Aegis, or similar; sign-in then also asks for the current 6-digit code.
  • Security key — register a hardware key (YubiKey and similar) as a second factor.
  • Recovery codes — generate single-use backup codes for when your authenticator or key is unavailable. They back up an authenticator app or a security key, so they can be created only once one of those is set up. If you remove your last authenticator app or security key, the recovery codes are turned off with it, and the page tells you whether that worked. A passkey does not count as a second factor here.

Sessions

Your session stays active in the browser. Use Sign Out from the account menu to end it explicitly — for example, on a shared machine. Security-sensitive changes may ask you to sign in again first.

Connected apps

An AI app can sign in to the TraceFast MCP server with your TraceFast account instead of an API key. You approve it once on a TraceFast consent page. Every app you approved is listed under Settings → Connected apps, where Disconnect takes its access away.

  • Quickstart — what to do once you're signed in
  • Favorites — your private list of saved addresses, transactions and blocks
  • What is TraceFast — the platform in one page
  • API — REST with an API key, MCP for AI agents, or per-call payment over x402 with no account

Last updated 22 Oct 2026, 08:06 UTC · verified against TraceFast v1.0.261 · Markdown