Distinguishing between authentication and authorisation
Authentication checks whether the credentials required for a particular sign-in method have been provided, for example the correct combination of email address and password or a successful sign-in via Google.
Authorisation takes place afterwards. It determines which account data and features a signed-in account is permitted to access. Factors such as the account type, account status, available features, company permissions and possible restrictions may be taken into account.
A successful sign-in therefore does not automatically mean that every feature is available. Nor is it comprehensive proof of identity or a guarantee that only the person who is actually authorised is using the sign-in details.
Signing in with an email address and password
If your account was set up with an email address and password, enter these details only on the official suchen.expert sign-in page. The password should be long, unique and used only for this account.
Guidance on choosing a secure password can be found in How do I create a secure password for my suchen.expert account?
If the password is no longer accepted or you have forgotten it, use the official ‘Forgot password’ function. Full instructions can be found in How do I reset my password?
Do not enter the password repeatedly in quick succession if you are unsure whether it is correct. Repeated failed attempts may trigger a security check or temporary restriction.
Signing in with Google for a personal account
For a personal account, signing in with Google can complete both registration and activation. Use the same Google account for every subsequent sign-in as you did the first time.
Enter your Google password only on an official Google page or in the official Google app. Check the web address before entering it and confirm only sign-in or authorisation requests that you initiated yourself.
A personal account set up through Google may not use a separate suchen.expert password. Resetting a suchen.expert password is therefore not necessarily the appropriate recovery method.
Signing out of suchen.expert does not automatically sign you out of your Google account. Conversely, signing out of Google does not necessarily end an existing session on suchen.expert.
Facebook and Apple are not currently confirmed sign-in methods
Signing in via Facebook or Apple is currently only planned. Neither option’s availability nor a specific launch date is promised.
When registering or recovering an existing account, therefore, rely only on the sign-in methods currently displayed on suchen.expert. Do not follow any message that offers a supposedly already available Facebook or Apple sign-in through an external link.
Special considerations for a business account
A separate business registration process applies to a business account. Google sign-in for a personal account does not provide access to a business account.
Only appropriately authorised persons may access a business account. Companies should establish internally who is responsible for sign-in details, the associated email inbox and support enquiries.
If an authorised person leaves the company or their responsibility ends, access, the password, active sessions and recovery details should be reviewed. Do not send sign-in details openly by email or chat.
Changes to company, representative or account-holder details may require an additional check. Submit proof of company status or identity only if it is specifically requested and a suitable transmission method is specified.
Check the web address and HTTPS connection
Where possible, access suchen.expert directly using the known address. Check that the address bar actually shows https://suchen.expert or an associated page.
An HTTPS connection encrypts transmission between the browser and the website. However, it does not by itself prove that every page you open is trustworthy. Fraudsters can also use similar-looking domains with HTTPS.
Pay particular attention to:
- additional or transposed letters in the domain name,
- unusual additions before or after ‘suchen.expert’,
- shortened or disguised links,
- unexpected redirects,
- browser or certificate warnings.
Do not bypass certificate or security warnings. If in doubt, open suchen.expert manually in a new browser window.
Check redirects to a sign-in service
Signing in with Google may take you to a Google page or the Google app. Check the domain and the context of the process there as well.
Cancel the process if an unexpected page asks for the Google password, a verification code or unusual permissions. Then start the sign-in process again directly through suchen.expert.
An unexpected request for renewed authorisation should not be confirmed simply because it displays the Google or suchen.expert logo.
Security checks by Cloudflare
suchen.expert may use technical security services such as Cloudflare. Depending on the connection, browser, network or detected risk, an additional check may be displayed.
Such a check may, for example, be required to limit automated access or unusual traffic. It does not necessarily appear at every sign-in and does not automatically mean that your account has been compromised or blocked.
A CAPTCHA or browser check may form part of this process if it is actually displayed. Do not attempt to bypass such a check using scripts, external solving services or other circumvention methods.
If the check keeps recurring, verify:
- whether JavaScript and the cookies required for suchen.expert are being blocked,
- whether the browser or operating system is up to date,
- whether an extension is altering the page,
- whether a VPN, proxy or corporate network is affecting the traffic,
- whether the device’s date and time are set correctly.
Do not disable security software or bypass the requirements of a managed corporate or government network. Further information can be found in Understanding Cloudflare: An important step towards greater security.
Protect activation and recovery links
Depending on the registration or recovery procedure, suchen.expert may send an activation or reset link. Such a link may be time-limited, usable only once or superseded by a new request. The instructions displayed during the specific process are decisive.
If you receive several messages, use only the latest expected link. Do not forward it or paste it into third-party checking sites. A complete activation or recovery link may contain security-relevant information.
Not every security message or link is necessarily genuine. Before opening one, check the sender, domain, reason and link destination. If you did not initiate the process yourself, do not click the link.
Sessions and cookies
After a successful sign-in, the browser may manage session information in cookies or comparable technical storage. This means that you do not have to sign in again every time you change pages.
Simply closing a tab does not always end a session. On shared devices, use the sign-out function provided and then close the browser. Do not save a password there.
Signing out in the current browser does not necessarily end sessions on other devices. If a feature for viewing or ending other sessions is provided, you can use it to close unknown sessions or those that are no longer needed. However, you should not assume that such a feature is available if it is not displayed in the account.
Deleting the website data for suchen.expert may end a local session in that browser and remove local settings. It does not replace confirmed sign-out on other devices.
Shared and public devices
Where possible, sign in only on trusted devices. If, as an exception, you use someone else’s device or a public device:
- do not allow the password or email address to be saved,
- do not use a feature that keeps you signed in,
- sign out completely when you have finished,
- close all browser windows you used,
- remove saved sign-in details if you are authorised to do so.
On someone else’s device, you cannot reliably assess which software is installed or whether your input is being recorded. If you entered a password there and have doubts about the device’s security, change it afterwards from a trusted device.
Secure the email account
The security of the sign-in process also depends on the associated email account. Activation, recovery and security notices may be received there.
Use a different, unique password for the email account. Enable multi-factor authentication or a passkey there if the provider supports it. Also review active sessions, recovery details, forwarding rules, filters and connected applications.
Detailed instructions can be found in How can I make sure my email address is protected?
Authorisation for individual features
After sign-in, the system checks which features are available to the account. A personal account and a business account may have different features and requirements.
The following circumstances may also affect access to particular areas:
- activation that has not yet been completed,
- a security check,
- a temporary technical disruption,
- a restriction due to suspected misuse,
- a moderation decision,
- a legal or regulatory requirement,
- missing company information or information that still needs to be checked.
Successful authentication does not automatically remove such restrictions. Do not create a replacement account to circumvent a restriction.
Safeguards do not offer an absolute guarantee
Technical and organisational safeguards can reduce risks, but cannot guarantee complete protection against every form of misuse. Phishing, malware, compromised email accounts, shared passwords and unsecured devices can jeopardise even a technically correct sign-in setup.
Do not therefore rely solely on the sign-in page. Protect the password, email account, Google account, devices and active sessions together.
Information about the processing of account, sign-in and security data can be found in the Privacy Policy.
Support does not need passwords or codes
Support does not need to know your password in order to review a sign-in problem or security incident. Never send:
- your suchen.expert or Google password,
- a PIN, TAN or card verification number,
- one-time confirmation codes,
- complete activation or reset links,
- the master password for a password manager,
- unsolicited identity or payment documents.
A legitimate support enquiry can be handled using the account type, registered email address, error message, time and observed changes. Use only the official contact form.
Recognising phishing and fake sign-in pages
Fake messages often claim that the account will be blocked immediately or must be confirmed urgently. They lead to lookalike sign-in pages designed to capture passwords and codes.
If you receive an unexpected message, open the platform manually. Do not enter sign-in details merely because a message creates a sense of urgency or displays a familiar logo.
Further guidance can be found in How do I recognise phishing attempts and fake messages?
If you suspect unauthorised access
Where possible, take action from a trusted device:
1. First secure the linked email or Google account.
2. Change a separately used suchen.expert password using the official function.
3. Replace that same password at all other affected services as well.
4. End unknown sessions if an appropriate function is provided.
5. Check profile details, listings, messages and other visible account activity.
6. Retain relevant emails, warnings and times as evidence.
7. Inform suchen.expert using the contact form.
Detailed instructions can be found in What should I do if I suspect unauthorised access to my account?
Send support a factual description, the account type, the registered email address and the approximate time of the unusual activity. Do not send passwords, complete security links or confirmation codes.
