Account, sign-in, and security
Google and Microsoft sign-in, sessions across devices, two-factor authentication, and how to keep an account safe.
-
How do I sign in to BOLMOL?
Use the sign-in button inside the widget or on the BOLMOL homepage. Google and Microsoft are the two supported identity providers. Pick the one you use, complete the provider sign-in in the popup, and you are returned to…
-
Do I need an account to read comments?
No. Anyone can read comments on any page without signing in. You only need to sign in when you want to post a comment, reply to a thread, or vote on a comment. Reading is always free and always available, for guests and …
-
Does BOLMOL support two-factor authentication?
Yes. Enable TOTP two-factor authentication from your account settings. You will need an authenticator app such as Google Authenticator, Authy, or 1Password. Eight single-use recovery codes are generated when you turn 2FA…
-
If I sign out, does it sign me out everywhere?
Sign out from any site logs you out of that browser across every site that embeds the widget. Sessions in other browsers or on other devices are not affected because each browser is tracked independently. To log out of e…
-
Can I use my BOLMOL account on multiple websites?
Yes. Your BOLMOL account works on every site that embeds the widget. Sign in once, and the same identity, avatar, and notification settings follow you across every other site in the same browser session. You do not need …
-
Can I be signed in on multiple devices at the same time?
Yes. BOLMOL supports multiple active sessions across devices and browsers. You can be signed in on your phone, tablet, and laptop at the same time. Each device has its own session and its own browser token. Signing out o…
-
Can I change my email address?
No. Once your email address is verified it cannot be changed. BOLMOL does not accept duplicate accounts on a single email address. This is an anti-abuse measure: an email address is the anchor of your identity on the pla…
-
Can I change my phone number?
No. Once your phone number is verified it cannot be changed. BOLMOL does not accept duplicate accounts on a single phone number. As with email, the verified phone number is an identity anchor and is treated as immutable.
-
How do I delete my account?
Log in, open account settings, and select delete account at the bottom of the page. All of your posts and comments are removed from public view and the account cannot be recovered. As described in the Privacy Policy, BOL…
-
How is my session protected?
Your session is bound to the browser you signed in from, not to a specific site. BOLMOL stores session cookies with the Secure, HttpOnly, and SameSite=None attributes, and marks them Partitioned in modern browsers so a s…
-
How secure is my account?
Sessions are bound to your network at sign-in time, and passwords, when set, are hashed with a modern algorithm. Two-factor authentication is available on every account and we strongly recommend enabling it. We work hard…
-
I lost access to my account. What can I do?
If you still have your Google or Microsoft account, sign in with the same provider and you will be back in. If you had set a password and lost it, use the password reset flow from the account settings page. If you had 2F…