How do I keep my account safe when I connect an app?

- Treat a key like a password. Paste it only into the app's own settings. Never into a chat, an email or a shared document, and never into the address.
- Tick only the actions the app needs, or start with the "Read only" Quick Choice. You can add more later.
- Choose the shortest end date that suits you.
- Make one connection per app, so you can stop one without touching the others.
- Read every request before you approve it. What you approve is exactly what happens.
- Approve a purchase only for the exact total you expect. Your card is entered on Clutter, never in the app.
- Look at Recent Activity now and then, and disconnect apps you no longer use.

Stopping everything at once
Turning off "Allow AI Features" under Privacy and AI in your account settings stops every connected assistant from working with your account until you turn it back on.

Staff accounts
A staff connection also needs an authenticator app on your phone, and approving a staff action asks for its code.

If you think a key has leaked
Press Disconnect on the connection straight away. A key keeps working until it ends, is revoked or its connection is disconnected; changing your password does not cancel it. Then look at Recent Activity, and contact support if anything there wasn't you.