Accounts & single sign-on
Destesi is a suite of products, but you only ever have one account and you only ever log in once. You create your account at account.destesi.io, and from there a single sign-on session follows you into every product.
One account, one login
Section titled “One account, one login”Your account is your identity across the whole suite. You sign up and sign in at account.destesi.io — that is the front door. Behind it sits a dedicated accounts service that owns your user, your sessions, and your workspaces.
There is nothing to configure per product. When you open Preview, Snap, Studio, Chat, or any other product, it recognizes the account you are already signed in with.
The 9-dot launcher
Section titled “The 9-dot launcher”Once you are signed in, the 9-dot launcher is how you move between products. It lists exactly the products your current workspace is entitled to and you have access to — open one, and you land in it already signed in. No second login, no copying tokens.
How single sign-on works
Section titled “How single sign-on works”You do not need to know the internals to use Destesi, but the model is simple and worth understanding because it explains the behavior you will see.
-
You log in once at account.destesi.io. This establishes your master session.
-
You open a product from the launcher. Behind the scenes, the accounts service mints a short-lived, one-time exchange token scoped to that product.
-
The product redeems the token for its own session and signs you in automatically. You never see this step — it is the redirect that happens as the product loads.
-
Your session stays fresh. Product sessions are renewed silently against your master session, so you are not kicked back to a login screen while you work.
Host-only sessions
Section titled “Host-only sessions”Each product holds its own session cookie, and those cookies are host-only — they are scoped to the product’s own domain and are not shared across domains. This is a deliberate security boundary: a session on one product’s host cannot be read by another’s.
What makes it feel like a single login despite the separate cookies is the exchange flow above: opening a new product transparently mints and redeems a fresh session for it from your one master session. You experience one continuous sign-on; under the hood each product is independently and safely authenticated.