Security
Two-factor authentication
Section titled “Two-factor authentication”Two-factor authentication is handled by your Tophhie Cloud account rather than inside Marvelist. You sign in with that account, so the same protection covers Marvelist alongside everything else on Tophhie Cloud.
Manage it from Profile → Manage my account, or from Tophhie Cloud Account directly. Marvelist used to have its own two-factor setup screens and they were retired when this moved, so if you are hunting for them in the app, this is where they went.
App Lock
Section titled “App Lock”Settings → Security → Enable App Lock requires a passcode or biometrics to open Marvelist, even when the phone itself is already unlocked.
It covers the whole app rather than one list. If your device has both biometrics and a passcode turned off, App Lock disables itself and lets you in rather than locking you out.
This is separate from locking an individual list, which is covered in Locked lists.
Privacy settings
Section titled “Privacy settings”Under Settings → Privacy:
| Setting | What it does |
|---|---|
| Allow List Sharing Requests | Whether other people can ask to share a list with you |
| Subscribe to Marketing Emails | Whether Marvelist emails you about the product |
| Invalidate All List Sharing Links | Kills every sharing link you have generated |
| Revoke Access to All Shared Lists | Removes everyone you have given access to your lists |
The last two are worth knowing about before you need them. They are the blunt instrument for the case where you have shared a lot over the years and no longer know who holds what. Neither deletes a list; they withdraw other people’s access to yours.
Protecting sensitive lists
Section titled “Protecting sensitive lists”Two features, for two different problems:
- Locked lists put a PIN or biometric in front of a list on a device.
- Vaults encrypt a list’s contents and issue a recovery code.
If you think your account has been accessed
Section titled “If you think your account has been accessed”In this order:
- Change your password on your Tophhie Cloud account.
- Sign out all other devices.
- Turn on two-factor authentication if it is not already on.
- Check sign-in history for anything you do not recognise.
Signing other devices out before changing the password just lets whoever it is sign back in.