Security & privacy

Sign-in security: verified email, rate limits and sessions

Most account takeovers start at the sign-in page. AdAce Ads combines verified email sign-up, rate limits, strict session handling and two-factor authentication.

What it does

Sign-up requires confirming the email address. Sign-in attempts are limited per account and address, so password guessing is slowed down. With 2FA on, the password only yields a short challenge bound to the browser; the session is issued after the code.

Sessions use secure, HTTP-only cookies. OAuth sign-in for AI clients returns to a consent page where you explicitly allow or deny access. Deactivation closes all sessions of the person, and sensitive steps are logged.

Why it helps

  • Strong protection against password guessing and session theft.
  • AI clients get access only after your explicit consent.
  • Clear audit trail of sign-in related events.

How to set it up

  1. Use a unique, strong password.
  2. Enable two-factor authentication in Settings.
  3. Review connected AI clients on “Connect AI” and revoke unknown ones.

Good to know

  • Never share accounts — invite teammates instead.
  • If you suspect a compromise, use the emergency stop and contact support.
Ace, the AdAce Ads mascot

Try it on your own accounts

Create a workspace, connect Google or Meta in a couple of clicks and see your accounts clearly. Changes follow your approvals or the policy you configure.

Create your workspace