Every sign-in is confirmed with a code sent to your email address. Archives are private to their workspace and the people its owner invites.