Is Ads Editor legit and safe? How to check the official link and what happens to your account

By Matheus Mello, founder of Ads Editor and owner of YEP Agência · Published Oct 31, 2026 · 5 min read

Is Ads Editor legit? Before you connect a client's ad account to any tool, that is the right question to ask. Here are the facts you can check yourself: which addresses are official, where the Facebook login goes and what the tool stores.

Quick answer
Yes. Ads Editor is a Meta Ads and Google Ads management platform built by Matheus Mello of YEP Agência. The official addresses are adseditor.app, adseditor.com.br, their subdomains and app.yepag.com. The Facebook login opens Meta's own window for app 930558169344495, and your Facebook password is never typed outside facebook.com.

Summary

Official addresses: adseditor.app, app.adseditor.app, adseditor.com.br, app.adseditor.com.br and app.yepag.com.
The Facebook login redirects to facebook.com with app 930558169344495, the same on all three app domains.
Access tokens are encrypted with AES-256 on the server; card data stays with Stripe.
There is two-factor authentication, a public privacy policy and data deletion through Meta or by email.
The iPhone app is on the App Store under the same name and points to adseditor.com.br.

Is Ads Editor legit: official domains, Facebook login and data protection

What are the official Ads Editor addresses?

Every official address is one of these. Any variation, such as a swapped letter, an extra hyphen or a different ending, is not Ads Editor.

Official Ads Editor domains

Address	What it is for
adseditor.app	English website, blog and pricing
app.adseditor.app	The platform (sign in and use) in English
adseditor.com.br	Portuguese website
app.adseditor.com.br	The platform in Portuguese
app.yepag.com	The platform's original address, still active
help.adseditor.app and help.adseditor.com.br	Help Center in English and Portuguese

The app addresses only answer over HTTPS: typing http://app.adseditor.app takes you to https://app.adseditor.app. So yes, an app.adseditor.app or app.adseditor.com.br link is real, as long as the domain is spelled exactly like that.

When you click Continue with Facebook, the browser leaves Ads Editor and opens the permission window on www.facebook.com. The address bar of that window shows client_id=930558169344495, the Ads Editor app ID at Meta. It is the same on all three app addresses (app.adseditor.app, app.adseditor.com.br and app.yepag.com), checked on Oct 31, 2026.

The rule for any tool

Your Facebook password is only typed on facebook.com. No legitimate ad tool asks for your Facebook password in its own form, by WhatsApp or by email. If it does, it is not Ads Editor.

Which permissions does Ads Editor request from Meta?

To connect ad accounts, the app requests ads, business, Page and Instagram permissions, such as ads_management and business_management. Under Meta's rules, an app that accesses data it does not own must go through App Review, and every app requesting advanced access needs business verification. Ads Editor's ads permissions were approved in that review, and the catalog permission was approved in October 2026.

You can revoke access at any time from Facebook itself, under Settings, Apps and websites. Ads Editor loses access immediately.

How does Ads Editor protect your account?

Its own password: email sign-in uses an Ads Editor password, separate from your Facebook one, stored only as a bcrypt hash.
Two-factor authentication: under My Account, with an authenticator app (Google Authenticator, 1Password and similar) or a one-time code by email.
Social sign-in: besides email, you can sign in with Facebook, Google or Apple, always on the provider's own screen.
Encrypted tokens: Meta and Google access tokens are encrypted with AES-256 on the server and never sent to the browser.
Team access by account: team members sign in with their own login and can be limited to the ad accounts you allow.

Account-level access is explained in how to give access to a Facebook ad account.

What does Ads Editor store and how do you delete your data?

The privacy policy lists what is collected: name, email and ID from sign-in, encrypted access tokens, subscription data and preferences. Card data is not stored: payments are processed by Stripe.

Through Meta: when you remove Ads Editor under Facebook Settings, Apps and websites, Meta sends a deletion request and the account is deleted, with a confirmation code.
By email: a request to [email protected], with removal within 30 days, as the policy states.
Tokens: invalidated when you disconnect, or every 60 days.

Who is behind Ads Editor?

Ads Editor was built by Matheus Mello, owner of YEP Agência, so his own agency could stop publishing ads one at a time. The story and contact are on the About page. The iPhone app is on the App Store as Ads Editor, published by Matheus Mello, and the listing points to adseditor.com.br and to the privacy policy on app.adseditor.com.br.

Ads Editor is not a Meta or Google product, and it is not Google Ads Editor. The difference is covered in Ads Editor vs Google Ads Editor. It uses the official APIs of both platforms.

The domain ends in adseditor.app or adseditor.com.br, or is app.yepag.com, spelled exactly like that.
The address starts with https and the browser shows a secure connection.
On Facebook login, the window is on www.facebook.com and shows app 930558169344495.
Nobody asked for your Facebook password outside facebook.com.
When in doubt, type the address yourself instead of clicking the link you received.

Step by step in Ads Editor

Help Center articles that walk through this task screen by screen:

Do I need my client's Facebook password to create the ad account and run campaigns?

Frequently asked questions

Is app.adseditor.app a real link?

Yes. It is the official address of the platform in English. Check that the domain is spelled exactly like that and that the connection is HTTPS.

Is Ads Editor a scam?

No. It is an ad management platform from YEP Agência, with a Meta-approved app, an iPhone app on the App Store and a public privacy policy.

Does Ads Editor ask for my Facebook password?

No. Facebook login happens in Meta's own window on facebook.com. Ads Editor only receives the authorization you approve.

How do I delete my Ads Editor data?

Remove the app in your Facebook settings, which sends the deletion request through Meta, or ask by email at [email protected].

Glossary

OAuth: A sign-in standard where you authorize an app on the provider's own screen, such as Facebook or Google, without giving the app your password.
App Review: Meta's review that approves which permissions an app can request from people outside its own team.
Two-factor authentication: A second proof of identity at sign-in, such as an app or email code, on top of the password.

References

Ads Editor Privacy Policy, accessed Oct 31, 2026. Supports: Data collected, AES-256 encrypted tokens, payments by Stripe without storing card data, removal within 30 days and tokens invalidated every 60 days.
Ads Editor on the App Store, accessed Oct 31, 2026. Supports: Ads Editor app published by Matheus Mello, with website adseditor.com.br and privacy policy on app.adseditor.com.br.
Permissions Reference (Meta for Developers), accessed Oct 31, 2026. Supports: What ads_management allows, App Review for apps that access data they do not own, and business verification required for advanced access.

The claim supported by each source is shown above.

About the author

Matheus Mello, founder of Ads Editor and owner of YEP Agência. Runs client ad accounts at YEP Agência and built Ads Editor so his own agency could stop publishing ads one at a time. Usage numbers quoted on the blog come from the product activity log. Instagram: @theusm