Account security

Two-step sign-in

Signing in to your ZestSSH account also asks for a code from an authenticator app, so a stolen password is not enough.

Sign in to your ZestSSH account to continue.

or

The authenticator's secret goes from Firebase Authentication to this page and into your authenticator app. It is never sent to ZestSSH. ZestSSH keeps only keyed hashes of your recovery codes. Privacy