What should I do if I suspect unauthorized access?

Take the following steps immediately:

1. Log out all active sessions from your account.
2. Secure the email account you use for passwordless login — anyone with access to it can sign in as you.
3. Review the Activity Log to see recent actions.
4. Remove any users you do not recognize from Settings → Users and Permissions.
5. Check billing profile sharing settings and admin/operator access.
6. Regenerate your API keys in Settings → API / MCP if any key may have been exposed.
7. Notify Komashi at info@komashi.com — you must report suspected unauthorized access promptly.

note

Report it as soon as you suspect it. You are responsible for activity under your account, except where it was caused by Komashi or happened after you reported the compromise.