How it works
What you do as a member, step by step, and what SplitASeat does on its side so that a shared account stays shared — and recoverable.
Your side
Six moments, in the order you'll meet them.
The services page lists every plan the operator pools, the seat price of a standard pool and how many seats are open right now. A pool is one shared account with a fixed number of seats, chosen to stay within the plan's simultaneous-stream or device limit.
"Opening soon" means a pool exists but its login hasn't been added to the vault yet. You can't join it, but you can put yourself on the service's waitlist so the operator knows there's demand.
The join page shows the exact monthly price — your share of the plan plus the $0.99 platform fee — the provider's known limits, the pool rules and the refund policy. Tick the box to agree, then continue to Stripe Checkout. Your seat is reserved for 35 minutes while you pay.
Once Stripe confirms the payment your seat is active and the pool appears in your dashboard. If you close the checkout, nothing is charged and the reservation simply lapses.
Open the pool in your dashboard. The Access tab shows the account email and a Reveal button for the password. The password stays on screen for 60 seconds, and revealing it requires that you signed in within the last 15 minutes — otherwise you confirm your identity first.
Sign in on the provider's site or app with that email and password. Use your own profile inside the account where the provider offers profiles.
If the provider asks for an authenticator code, the 2FA tab generates the current six-digit code for you; it changes every 30 seconds. You never see the secret behind it, so nobody who leaves the pool can keep generating codes.
If the provider emails a code instead, it lands in the pool's Inbox tab. Only codes from a verified provider address show up, and you can copy them in one tap. You won't see the rest of the email. Every member with a seat, and SplitASeat staff, can see those codes.
Don't change the password, the account email or the two-factor settings — ever. Those are what let SplitASeat keep the account recoverable for everyone. If something looks off, open a support ticket instead.
The Members tab shows which seats are taken, and the Activity tab shows what happens in the pool — "Seat 2 revealed the password", "Seat 4 generated a 2FA code" — by seat number, never by name.
Your seat renews monthly. If a payment fails you get 7 days to fix your card before access stops. Cancel any time from Billing: your seat stays active until the end of the period you've paid for and isn't renewed.
When a seat is cancelled or removed, the operator rotates the password so the former member can't keep using the account. You'll see "Password updated" on the Access tab and the new password is one reveal away.
Our side
None of this needs anything from you. It's what makes the arrangement safe enough to use with strangers.
Every shared account is registered under an address on SplitASeat's own mail domain, with a password SplitASeat sets and, where the provider supports it, authenticator-app 2FA that SplitASeat enrols. Members get access to the account, never ownership of it.
The password and the 2FA secret are encrypted with a key that exists only for that pool, itself protected by a master key that never leaves the server. The server decrypts the password only for a logged reveal and uses the 2FA secret only to produce a code.
Mail to the pool address is sorted automatically: verification codes, security alerts, password-reset links and billing receipts. Members see verified login codes and nothing else; all other mail stays with staff. Messages that fail sender authentication are marked "Unverified sender" and never trigger anything on their own.
If the provider's own, authenticated "password changed" or "email changed" alert arrives, the pool freezes: reveals and codes pause and the member inbox is cut off at that moment. Staff recover the account through the mailbox and 2FA SplitASeat controls, set a new password, remove and ban whoever did it, and let everyone back in.
A seat leaving, being removed or expiring marks the pool as due for a password rotation. Staff change the password on the provider's site and update the vault; members simply reveal the new one.
Every reveal, code, inbox view, join, departure, rotation and freeze is recorded. Members see it by seat number; staff see who was behind each seat, because handling disputes is their job.
If an account can't be recovered or the operator stops offering a service, the pool is closed, every subscription is cancelled and each member is refunded the unused part of their current month.
SplitASeat can't stop a member who holds the password from changing it on the provider's site; it can only make sure that attempt is pointless, visible and costly. It also can't make sharing allowed where a provider forbids it — a provider may suspend a shared account, in which case the pool is closed and refunded. The security page spells out both limits in full.