Skip to main content
Anyone with access to your Xlistr workspace can see inventory and may be able to change listing or account settings. Protect the account and the Chrome profile you use for selling.
The Xlistr Settings screen

Settings has a Security tab for sign-in and access controls.

​
Secure your Xlistr sign-in

  • Use a unique password that you do not use anywhere else.
  • Enable two-factor authentication in Settings > Security when it is available.
  • Never share a sign-in code with anyone, including support.
  • Sign out of shared computers.
  • Keep your email account secure; it is the recovery route for Xlistr.
A password manager makes a unique password much easier. If you do not use one, write the password down and keep it somewhere physically safe, not in a note on your phone.

​
Give teammates their own access

Do not share one login between several people. Invite each teammate with their own account.
  1. Open Settings > Security or the team area shown in your workspace.
  2. Invite the teammate by email.
  3. Choose the smallest role that lets them do their job.
  4. Remove access when someone leaves.
Roles usually include owner, staff and read-only. The exact names can differ, but the principle is the same: only give the access that is needed.
The workspace owner has the most power. Use a strong password and two-factor authentication on the owner account. Do not use the owner account for everyday listing work if a staff account will do.

​
Protect the Chrome profile used by the extension

The Xlistr Chrome extension works with the seller sessions in that browser profile. Treat that profile like a key to your shops.
  • Use your own Chrome profile, not a shared family or work profile.
  • Lock your device when you step away.
  • Do not install the extension on a computer you do not trust.
  • Remove the extension and sign out of the marketplace if you sell the computer.
  • Check chrome://extensions if you are unsure which extensions are installed.

​
Export before deleting an account

Download any data you need before requesting permanent deletion. Deletion cannot be undone.
  1. Open Settings > Account.
  2. Find Your data.
  3. Click Download my data.
  4. Check that the download contains what you need.
  5. Only then request deletion.

​
What support will never ask for

Xlistr support will not need:
  • your marketplace password;
  • your two-factor code;
  • your card details;
  • your bank login.
If someone asks for these and claims to be from Xlistr, stop and contact us through the official email address.

​
Common questions

Open Settings > Security and follow the instructions. If the option is not shown, your workspace or plan may not have it enabled yet.
Remove their access immediately. If they had the Chrome extension on a shared device, remove it and sign out of the marketplaces on that device.
Use the audit log in Settings > Audit log where it is available. It shows changes made in Xlistr, not changes made directly on the marketplace.
Change your Xlistr password, enable two-factor authentication, review team access, and check the audit log. Then contact support.
Export your data first, then use the deletion option in Settings > Account > Your data. Deletion is permanent.

​
Next steps

Plans and billing

Review your plan, invoices and AI credits.

Chrome extension

Set up the browser bridge safely.

Support

Find out what to include in a security request.

Glossary

Understand the words we use.