# Security

Authentication, sessions, and account safety.

Manage your security settings from **Settings → Security**.

## Authentication Methods

Starlight supports two sign-in methods:

- **Google OAuth** — sign in with your Google account (recommended)
- **Magic Link** — receive a one-time login link via email, no password needed

Your current authentication method is displayed on the Security settings page.

## Sign Out Everywhere

If you suspect unauthorized access or want to terminate all active sessions across devices, use the **Sign Out Everywhere** button. This invalidates all current sessions, requiring you to sign in again on every device.

## Delete Account

Permanently delete your Starlight account and all associated data. This action cannot be undone.

> **Warning:** Deleting your account removes all your leads, messages, sequences, and settings permanently. If you're the Owner of a company, you'll need to transfer ownership or delete the company first.

## Data Security

- **OAuth tokens** are encrypted with AES-256-GCM before storage
- **Email content** is stored securely and only accessible to your team
- **No passwords** are stored — Starlight uses passwordless authentication exclusively