We email you the moment something changes about how your account is signed in to. Each email says what happened, then when, on what device and roughly where, so you can check it at a glance. Most of the time it was you, and there is nothing to do.
The emails, and what sets each one off
| The email | When it comes |
|---|---|
| "A new sign-in to your TaleTykes account" | The first time a phone, tablet or browser signs in to your account. The device your account was made on never sets it off. |
| "Your TaleTykes password has changed" | Your password was changed in Settings, or reset from an emailed link. |
| "Two-step sign-in is now on" or "Two-step sign-in is now off" | Someone turned two-step sign-in on or off. |
| "You have new backup codes" | A new set of backup codes was made, and the old ones stopped working. |
| "A backup code was used to sign in" | Someone signed in with a backup code instead of a code from the authenticator app. The email says how many codes are left. |
| Signing in with Google or Apple added or removed | A Google or Apple account with your address can now sign in to your account, or no longer can. |
| "A copy of your TaleTykes data was downloaded" | Everything your account holds was downloaded from Settings. |
"Where" is the nearest city our network could see, and it can be a city or two away from you, or say "We could not tell". We never show your IP address. A new phone, a different browser, a private window, or clearing your browser's history can all look like a new device to us.
If it was not you
- Go to the page for a new password and set a new password straight away. Resetting your password signs out every device that was signed in to your account, including whoever it was.
- Sign in again with the new password.
- Tell us from Help in your dashboard, or write to support@taletykes.com, and say which email you got. We will look at the account with you.
- If you do not use two-step sign-in, think about turning it on.
If you cannot sign in at all, see Can't sign in.
Why none of these emails has an "It wasn't me" button
A button in an email that undoes something on its own is exactly what a fake email would copy to get you to click it. So our security emails only ever send you to our own sign-in pages, which you can also reach by typing our address yourself. If an email claiming to be from us asks for your password, or has a button that changes your account without you signing in, it is not from us.
Turning them off
Security emails cannot be turned off, because the one you would miss is the one that matters. They only come when something about your account's sign-in has actually changed.