Settings

Profile

your name and photo

Password

change the password you sign in with

Changing your password signs you out everywhere else. This device stays signed in. If you sign in with a link, a passkey or Google, there is no password on this account to change.

At least 12 characters, with a mix of upper case, lower case, numbers and symbols. Not a common password, and not your own name or email.

Sign-in email

move your account to a new email address

We send a link to the new address and a notice to your current one. Nothing changes until you open the link. After the change, other devices are signed out.

Passkeys all tiers

sign in with Face ID, Touch ID, Windows Hello, or a hardware key

Passkeys are stronger than passwords and faster than codes. Add one per device you trust - your phone, your laptop, your hardware security key. Sign-in becomes one tap.

Authenticator app (TOTP)

checking…

Use any authenticator app (1Password, Aegis, Google Authenticator, Authy) to generate a 6-digit code every 30 seconds. Backup when your passkey isn't handy.

Backup codes

checking

Backup codes sign you in when you cannot reach your authenticator app. Each one works a single time. Keep them somewhere only you can get to.

Active sessions

where you are signed in

Every sign-in of yours is listed here. If you do not recognise one, sign it out. That device then has to sign in again from scratch.

Sign-in history

recent sign-ins to your account

Each sign-in to your account, newest first, with what we noticed. If one was not you, sign that session out above and change your password.

Devices

…

Every device that's signed in is listed here with its trust state. Revoke any device to kill its sessions and force a fresh sign-in with a stronger factor. Your tier caps the number of registered devices (Free 2 · Pro 6 · Family 10 per seat · Business / Enterprise unlimited).

Find my devices → - see each device's coarse city & country and any lost/stolen status.

My devices

VPN in the WireGuard app

Use the Vilkax VPN on iPhone, iPad, Mac or any device through the official WireGuard app. Each config belongs to one device, expires on its own and can be revoked here at any time.

Connect this device

Subscription

current: Free (Pack)

Pick a plan above - Stripe Checkout opens a secure payment page. Manage or cancel your plan anytime from the billing portal below.

Manage billing & cancel

Have a code? Redeem it Give Vilkax as a gift

Gift a year One payment for 3, 6 or 12 months

Account

billing · data export · deletion

Compliance

your data, your control
More settings notifications, family, companion, integrations, appearance, language

Two-factor coverage

checking

Your other accounts matter as much as this one. We look at what we already know about, such as your saved logins, the emails you monitor and the identities you have linked, and say which ones look like they have no second factor. We never guess at an account you have not told us about.

Recent sign-ins to review

Sign-ins that looked unusual. Tell us whether each one was you.

    Was this you?

    lock your account down in one step

    If you see a sign-in, a change or a security e-mail from us that was not you, secure your account here. Every other device is signed out, remembered devices must use the two-step code again, and if your account has a password it stops working at once and we e-mail you a link to set a new one.

    Phone number & calls

    SIM swap, takeover and "is this my bank?"

    Who may be told if your number is hijacked

      Check a number before you call or answer

      Your number never leaves this device: only a short piece of its fingerprint is sent.

      Protect your email

      read-only · revocable · verdicts only

      Link a mailbox and Vilkax checks every new message for scams and phishing. We keep the verdict, never the message.

      Protect your email

      Lock down your accounts

      A short checklist for each of your main accounts, with a link to the platform's own settings page for every step.

      Open the checklist

      Connected accounts

      read-only · revocable · minimised

      See what is connected to Vilkax, what each connection can read, when it was last checked, and disconnect it.

      Connected accounts

      Tester challenge

      Loading your tester status

      Companion form

      A glowing companion with no face. Pick a shape and a colour; it floats softly and takes on Hearth's mood.

      Shape
      Colour

      Hearth companion · 3D avatar

      SVG default

      Optional: give your companion your own 3D avatar. Paste a link to a .vrm file you host. Your browser loads it directly; we never download or store it.

      HTTPS only, .vrm, up to 20 MB. Devices that cannot render it use the standard companion automatically.

      Parental Controls

      screen time · content · app rules · alerts

      Compare features

      single source of truth

      loading matrix…

      Your protection setup

      what is still missing

      Checking your setup…

      What I shared

      privacy

      Links, website names and wallet addresses from your reports, and where each one could have gone.

      Alert notifications

      Choose which alerts reach you outside the app, and when your devices stay quiet.

      Loading your choice…

      How Vilkax responds

      Choose how strongly Vilkax speaks up next to a result. This never changes what a check finds.

      Loading your choice…

      Heads-ups before scams

      Warnings before a scam reaches you. These are off until you turn them on.

      Loading…

      Email aliases

      Give shops and sign-ups a masked address instead of your real one. Mail is checked for scams and forwarded to your verified email. Turn an alias off when it starts getting spam.

      Loading…

      Data-broker opt-outs

      People-search sites and data brokers sell personal details. Ask them to remove yours. Where a broker publishes an opt-out email we can send the request for you; otherwise we link to the broker's own opt-out page.

      Loading…

      Erasure requests (GDPR Article 17)

      Write a ready-to-send letter asking a data broker to erase your data. Your name and email stay in this browser, and you send the letter yourself.

      WhatsApp alerts

      for people who do not use Telegram

      Add the number you use for WhatsApp, then confirm it with the code we send. We only message it when something is genuinely wrong - a scam in progress, money moving, or an emergency - never for routine notices.

      Telegram

      one-tap sign-in · Hearth · Guardian alerts

      Claim your @handle here, then tap Start on the Vilkax Hearth bot. From then on every new sign-in attempt asks you to confirm in Telegram - no email link needed when you're at the keyboard.

      Invite a friend

      your personal link

      Or give Vilkax as a gift

      Appearance

      theme · stored on this device

      Dark is the Vilkax default. Future is a deeper night shell with a brighter signature violet. Your choice applies instantly across the app.

      Language

      app + email language · stored on this device

      Vilkax's UI shell follows your selection. Full string translations land progressively - English is complete today; other locales fall back to English for any string not yet translated.

      Replay the welcome tour