MeldID

MeldID — a secure TOTP authenticator and a unified account for MELD® products.

Add TOTP accounts manually or scan standard QR codes. The encrypted MeldID vault synchronizes between devices, and after synchronization TOTP codes are generated locally and continue to work even without an internet connection.

MeldID supports standard TOTP QR codes in the otpauth:// format and can be used with MELD® products as well as third-party services supporting TOTP authentication or Sign in with MeldID.

When signing in on a new device — regardless of whether it is an iPhone or Android device — after successfully completing the required verification steps, users get access to all their TOTP codes without manual import, export, or backup transfer.

Protection of the TOTP vault is enhanced with KeyMeld — an additional secure layer of MeldID for managing key material. TOTP data is stored and transmitted only in encrypted form.

MeldID allows users to use a single account to sign in to MELD® products and integrated third-party services. Connected services receive only the data and permissions explicitly approved by the user. The MeldID password and TOTP secrets are never shared with third-party websites.

If desired, users can enable additional sign-in protection through VerifyMeld. To do so, one or more trusted phone numbers can be added.

After activation, signing in may require free phone number verification through VerifyMeld or approval of the sign-in from another trusted MeldID device.

Verification through VerifyMeld is performed using a confirmation call: the user places a call to the VerifyMeld number, after which the call is automatically terminated without establishing a phone connection. MeldID and VerifyMeld do not charge users for this verification.

The cost of this verification depends only on the terms of the user's mobile plan. Since no phone connection is established, we are currently not aware of any mobile operators that charge for such calls.

On an active trusted device, the user can approve the sign-in of a new client or cancel the sign-in attempt. Additional verification is optional and enabled only at the user's request.

The MeldID client itself does not require confirmation through the same client during initial registration or standard sign-in.

Password recovery

After requesting password recovery, a one-time link is sent to the user's email. A new password is created and shown to the user immediately, but it does not become active until the configured security delay has expired.

Until the new password is activated, the current password continues to work. If the user has access to a trusted MeldID device, they can confirm the password change and activate the new password immediately or cancel the recovery process.

If access to MeldID is unavailable, the new password is activated automatically after the security delay expires. During this time, the user can cancel the recovery through MeldID or enable Panic Mode.

Panic Mode

Panic Mode temporarily blocks the account, the MeldID client, and products connected through it.

After confirming the activation of Panic Mode, active accesses and sessions are revoked, new sign-ins are blocked, password recovery is cancelled, and pending activation of the new password is reset.

Panic Mode does not delete the account, data, or TOTP codes and does not change the current password. After the blocking period ends, access is restored through the normal sign-in process.

On third-party websites, Panic Mode works only when integrated with MeldID and when the MeldID session status is checked.