Phone voice PIN, callback, and security alerts
What the six-digit PIN and the Callback before access toggle actually protect, the three Session email alerts settings, and every phone voice security email dreamif.ai sends.
Why a phone call needs its own protection#
Browser voice sits behind your signed-in session. A phone call has no session to check, so caller ID is the only thing tying an incoming call to you. Caller ID can be spoofed. The PIN and the callback close that gap.
The PIN#
The PIN is six digits, set on the Access tab with Set PIN and changed later with Change PIN. The row reads PIN set or No PIN set so you can tell at a glance.
It's asked for on dial-in, before the assistant will do anything: "Enter your six digit phone voice PIN". It's also required before the Call me now callback in Chat will start a call.
Treat it like a door code. Anyone who has your phone number and your PIN can read your email out loud.
Callback before access#
This toggle hangs up on an inbound call and dials your verified number back before the session starts. A caller spoofing your number gets a dead line, because the call that actually connects is one dreamif.ai placed to a number you proved you own.
Turn it on if you're security-conscious or if you use the assistant for anything sensitive. The cost is a few seconds of waiting for the phone to ring back.
Session email alerts#
The Session email alerts dropdown sets when dreamif.ai emails you as a phone session begins:
| Setting | When you get an email |
|---|---|
| Always | Every phone session, no exceptions |
| Suspicious or PIN-only | Sessions that looked unusual, or ones that got in on the PIN |
| Off | No email at session start |
Off silences the session-start email only. Security emails about changes to your phone setup still go out.
Every phone voice email dreamif.ai sends#
| Subject | What triggered it |
|---|---|
| "Phone voice settings changed" | Something on the Voice Access page was saved |
| "Phone voice PIN changed" | A new PIN was set |
| "Phone voice number added" | A number was verified |
| "Phone voice number removed" | A verified number was taken off the account |
| "Phone voice security update: {event}" | A security-relevant change, named in the subject |
| "Phone voice session started" | A call connected, under your alert setting |
| "Suspicious phone voice session started" | A call connected that looked unusual |
| "We couldn't reach you by phone" | A callback was attempted and didn't connect |
| "Phone voice changed Gmail" | A call sent, edited, or otherwise changed something in Gmail |
If one of these arrives and you didn't do it#
Move in this order:
- Open Settings > Voice access and check the Access tab. If there's a verified number you don't recognize, remove it.
- Click Change PIN and set a new one.
- Turn Callback before access on and Session email alerts to Always while you sort it out.
- Go to Security from the avatar menu and end any sessions you don't recognize. See Review your account security.
Check the sender before acting on any of it. dreamif.ai emails never ask for your PIN, and no legitimate message will link you to a page that asks you to type it in. See Recognize legitimate dreamif.ai emails.