Only tick this on your own computer. Without it, you're signed out when you close the browser, or after 12 hours. With it, you stay signed in for up to 90 days, and for 30 days after your last visit.
Clio stores a one-way code for your account, not your email address, name or photo.
On a trusted personal device this also keeps your identity unlocked in this browser profile until you choose Lock device or Sign out. Anyone who can use this browser profile can act as you until then. Do not tick this on a shared or public computer. Only tick it on your own computer, with full-disk encryption (BitLocker or FileVault) turned on.
This browser is remembered for sign-in only.
Personal or shared device?
Use this only on a personal device you trust, never on a shared device. When ticked, your identity stays unlocked in this browser profile, in every tab and after reloads, with no time limit, until you lock the device, sign out, or untick this box. After that your passkey or passphrase is needed again.
The server renews this sign-in while this tab remains unlocked and its trusted-device grant is valid. Lock or sign out before handing over your device. The longer server sign-in applies the next time you sign in.
An unlocked tab carries risk if malicious code runs in it or someone gains physical access. Browser memory and operating-system sleep or recovery are not guaranteed to remain stable. The key kept for this never leaves this device over the network, but any script that runs on the Clio site while it is kept (for example through a harmful browser extension) could copy your identity off this device, and locking would not undo that copy. Separately, malware, a harmful browser extension or a person at this computer can use it while it is kept.
On some browsers that key is stored in this browser profile's files, so anyone who can copy this computer's files or backups could use it. Turn on full-disk encryption (BitLocker or FileVault). Locking ends its use in this browser, but not copies of those files already taken.
While it is kept, reopening Clio also opens drafts autosaved on this device, which can include site coordinates, without your passkey. Creating a recovery kit, adding an unlock method, linking an account or approving another device still asks for your passkey or passphrase.
On a shared browser, leave this unchecked; its server sign-in expires after 1 hour and the signing key locks after 5 minutes of inactivity.
Verify with Google or Microsoft.
Protect your new identity on this device.
Save your recovery kit and phrase, then continue to your contribution.
Already have a Clio identity? Use your recovery kit or link a device below to keep the same identity. In a private or incognito window, local identity storage is removed when you close the window. Keep your recovery backup outside it.
Google or Microsoft verifies an account when you create your Clio identity. Ma’atara associates that account with your new DID. Clio then uses the identity protected on your device to sign your contributions.
Your passkey or device unlock passphrase protects the local copy on this browser. Your recovery kit and recovery phrase are separate backup items for restoring the same identity on another device. Never enter the recovery phrase as your device passphrase or share either item with support.
Warning. This deletes the saved copy of this identity from this device only. You do not need to unlock it first. Your identity, your records and your other devices are not touched.
Only do this if you are signed in on another device that holds this identity, or you have its recovery kit and recovery phrase. If you have neither, this identity is gone for good.
Continue with Google or Microsoft, then unlock your identity to finish signing in.
Use your recovery kit and its recovery phrase to set up this device.
Use your existing identity
Add this device to your existing identity
Two steps, on two devices. 1. On the new device, press "This is the new device: show a code". 2. On the device that already holds your identity, press "This device holds my identity: scan a code" and approve. A device with no saved identity cannot approve.
Adding a laptop or phone? Show the code on the laptop or phone, then scan it from the device where your identity is already saved. Show the code on the new device, not on the one that already holds the identity.
Paste a Clio device link
Point the camera at the whole desktop code. Camera frames stay on this device.
No camera on the other device? Copy or email yourself the link, then open "Paste a Clio device link" there. It works for 5 minutes and still needs the matching code check.
Keep the whole code visible. Scan it from the device that already holds your identity, then compare the matching code before approving.
Matching code
Only approve a code you just opened on your own device, for the identity shown below.
Unlock your saved identity again for this approval.
This device has no matching saved identity, so it cannot approve. Cancel, then press "This is the new device: show a code" on this device and scan that code from the device that holds your identity.
This will save your identity on that device. Only approve a device you trust.
Linking is available when this page finishes loading.
Recovery backup
Keep a way back in.
Store the kit and recovery phrase separately. You need both if you lose access to this device. Never share them with support or another person.