Keeping your account safe

Your account holds your drafts, your published work, and your community. A few simple habits keep all of it yours.

Never paste code into your browser console

Every browser has a hidden developer console, a tool built for engineers. If you open it, you may notice a friendly note from Lupin and a warning in red.

That warning is there for a reason. A common scam tells you to copy something and paste it into the console to “unlock free Pro,” “see who viewed your profile,” or “recover a locked account.” None of those features work that way. Pasting code there runs it with full access to your logged-in account. A stranger can take over your account and your writing in seconds.

The rule is short: never paste anything into the browser console unless you wrote it yourself and know exactly what it does. Inkbreaker will never ask you to.

How to spot a scam

Real Inkbreaker features live inside the app, in menus and buttons you can see. Be suspicious of anyone, in a comment, a message, the forum, or an email, who asks you to:

• Paste code anywhere to “enable” something.
• Visit an outside site to “verify” your account or claim a prize.
• Share your password, a login link, or a one-time code.
• Move the conversation off Inkbreaker to “finish” a payment or a deal.

When something feels off, it usually is. You can report it from the Report option on any profile, post, or message.

Sign in safely

• You can sign in with Apple, Google, Discord, or Microsoft, or with your email and a password. We never ask for your password in a chat, a comment, or an email.
• Check the address bar before you sign in. The real site is inkbreaker.com.
• If you share a computer, sign out when you finish.

Two-step verification

Two-step verification adds a second lock: signing in takes your password plus a 6-digit code from an authenticator app on your phone (Google Authenticator, 1Password, and Authy all work). Even if your password leaks, nobody gets in without your phone.

To turn it on, go to Preferences › Account, enter your password, and scan the QR code with your authenticator app. In the mobile app, copy the setup key from Settings › Account into the authenticator instead. Your account needs a password first; if you signed up with Apple, Google, Discord, or Microsoft, set one in the password section on the same page.

When you finish setup we show you a set of backup codes, once. Each code signs you in a single time if you lose your phone. Store them somewhere safe, like a password manager. You can create a fresh set from the same page whenever you want; the old set stops working.

You can check Trust this device for 30 days when you enter a code, so your own devices don’t ask again every time.

If you think your account was reached

Change your password from Preferences › Account. Changing it signs out every other device at the same time, so anyone using your account loses access on the spot. If you shared your Apple, Google, Discord, or Microsoft password anywhere, change that too, and consider turning on two-step verification above. If your writing was copied or your work was changed, see Protecting your work and reach out from the Support page. We can place a legal hold on stolen work and help you sort it out.

Your writing is yours. We will never ask you to give up control of it to keep it.