Settings

Changing your password signs you out everywhere else. This device stays signed in. If you sign in with a link, a passkey or Google, there is no password on this account to change.

We send a link to the new address and a notice to your current one. Nothing changes until you open the link. After the change, other devices are signed out.

Passkeys are stronger than passwords and faster than codes. Add one per device you trust - your phone, your laptop, your hardware security key. Sign-in becomes one tap.

Use any authenticator app (1Password, Aegis, Google Authenticator, Authy) to generate a 6-digit code every 30 seconds. Backup when your passkey isn't handy.

Backup codes sign you in when you cannot reach your authenticator app. Each one works a single time. Keep them somewhere only you can get to.

Your other accounts matter as much as this one. We look at what we already know about, such as your saved logins, the emails you monitor and the identities you have linked, and say which ones look like they have no second factor. We never guess at an account you have not told us about.

Every sign-in of yours is listed here. If you do not recognise one, sign it out. That device then has to sign in again from scratch.

Yes, it was me

If you see a sign-in, a change or a security e-mail from us that was not you, secure your account here. Every other device is signed out, remembered devices must use the two-step code again, and if your account has a password it stops working at once and we e-mail you a link to set a new one.

Who may be told if your number is hijacked

Is this really my bank calling?

Partners you approved receive typed signals only, never your messages, contacts or browsing. Revoking stops sharing immediately.

Link a mailbox and Vilkax checks every new message for scams and phishing. We keep the verdict, never the message.

Protect your email

Personal sensitivity, what your AI agent may do on its own, contact-pattern memory and feedback.

Open AI controls

A short checklist for each of your main accounts, with a link to the platform's own settings page for every step.

Open the checklist

See what is connected to Vilkax, what each connection can read, when it was last checked, and disconnect it.

Connected accounts

Pick a plan above - Stripe Checkout opens a secure payment page. Manage or cancel your plan anytime from the billing portal below.

Manage billing & cancel

Have a code? Redeem it · Give Vilkax as a gift

Loading your tester status

You have not joined the tester challenge. Join the challenge

We could not load your tester status. Please try again. Try again

Build your companion in VRoid Studio (free), export as .vrm, host the file on a public HTTPS URL (R2, GitHub, Dropbox direct-link), and paste below. We never download or store the file - your browser fetches it from your host.

File must be HTTPS, end in .vrm, max 20 MB. Renders on desktop where the device has enough GPU; phones fall back to the lightweight SVG companion automatically.

Links, website names and wallet addresses from your reports, and where each one could have gone.

Choose which alerts reach you outside the app, and when your devices stay quiet.

Loading your choice…

Choose how strongly Vilkax speaks up next to a result. This never changes what a check finds.

Loading your choice…

Warnings before a scam reaches you. These are off until you turn them on.

Loading…

Give shops and sign-ups a masked address instead of your real one. Mail is checked for scams and forwarded to your verified email. Turn an alias off when it starts getting spam.

Loading…

People-search sites and data brokers sell personal details. Ask them to remove yours. Where a broker publishes an opt-out email we can send the request for you; otherwise we link to the broker's own opt-out page.

Loading…

None of the brokers in our list publishes an opt-out email we could verify, so each opt-out below is done on the broker's own page.

Add the number you use for WhatsApp, then confirm it with the code we send. We only message it when something is genuinely wrong - a scam in progress, money moving, or an emergency - never for routine notices.

Claim your @handle here, then tap Start on the Vilkax Hearth bot. From then on every new sign-in attempt asks you to confirm in Telegram - no email link needed when you're at the keyboard.

Or give Vilkax as a gift

Dark is the Vilkax default. Future is a deeper night shell with a brighter signature violet. Your choice applies instantly across the app.

Vilkax's UI shell follows your selection. Full string translations land progressively - English is complete today; other locales fall back to English for any string not yet translated.

Every device that's signed in is listed here with its trust state. Revoke any device to kill its sessions and force a fresh sign-in with a stronger factor. Your tier caps the number of registered devices (Free 2 · Pro 6 · Family 10 per seat · Business / Enterprise unlimited).

Find my devices → - see each device's coarse city & country and any lost/stolen status.

• Encryption at rest - every email is AES-256-GCM encrypted with a key we rotate on demand.
• Domain-aggregate operator views - the Vilkax operator dashboard surfaces emails as al★★★@example.com; the business view never reads the email column at all.
• Right to export - request a JSON dump of your row + every shield event ever raised on your behalf (self-service and free on every account).
• Right to be forgotten - your data is hard-deleted within 30 days; encrypted backups age out within 90.
• Right to explanation - every automated decision (threat score, AI tier, anomaly flag) is logged with its inputs; you can request the record that drove any specific call.