Signing in
Cardiplier accounts use verified email, a permanent password, and mandatory multifactor authentication. The current customer method is SMS verification. Sessions can be revoked, and protected resources are checked against the signed-in account on the server.
Sensitive actions
Some sensitive changes may require you to confirm your identity again where that check is implemented. Keep your account email and phone number up to date, and use Account & Security in My Cardiplier to manage available recovery options.
Your CEX number
A CEX number identifies a submission. It is not a password, is not a login credential, and by itself does not grant access to a collection.
Protect your codes
Cardiplier will never ask you to send your password, MFA code, recovery code, or authentication secret. If a message asks for one, do not send it. Use the Contact page and select Security to report a concern.