Why do security emails also go to my recovery address?
Security alerts, such as a new app getting access or a changed password, go to your Cirrux mailbox and to your recovery email address. The copy outside Cirrux is the one an intruder can't delete. You change the recovery address under Settings, Profile.
When something changes about how your account can be reached, Cirrux tells you in two places: your own mailbox and your recovery email address. This covers a new app getting access to your account, a changed password, passkeys or two-step verification being added or removed, and a changed recovery phone number.
The copy at your recovery address is the important one. Someone who gets into your account, or an app that has just been given access to your mail, could quietly delete the warning from your Cirrux mailbox. They can't reach your other address.
The recovery address is also where Cirrux sends a password reset, so it is how you get back in when you forget your password.
Change your recovery address
Go to Settings → Profile and click Change next to Recovery email (or Set up if you have none). You confirm with your password and with a code sent to the new address. Your old recovery address gets a message about the change.
Pick an address outside Cirrux that you actually read. A recovery address that no longer exists, or answers with "I don't use this address anymore", means alerts and password resets go nowhere without you noticing.
Related
Still stuck? Email help@cirrux.co and we’ll help you out.