Password, two-factor authentication and sessions

Security Settings

1. 1

   Step 1: Open Security Settings

   Where to find it

   1. Settings
   2. Security Settings
2. 2

   Step 2: Verify your email

   Under Profile, your email shows Verified or Not verified. Choose Resend link if you need a new verification email.

3. 3

   Step 3: Change your password

   Under Password, enter your Current password and the new one twice, then choose Change password. Your other sessions are signed out.

4. 4

   Step 4: Sign out other devices

   Under Active sessions, choose Sign out next to a session, or Sign out other sessions to keep only this device. Sessions signed in with a two-factor code are marked 2FA.

Turn on two-factor authentication

With two-factor authentication on, signing in needs your password and a 6-digit code from an authenticator app on your phone (for example Google Authenticator, Microsoft Authenticator, 1Password or Authy). It is optional and set by each person for their own account.

1. 1

   Step 1: Start setup

   Under Two-factor authentication, choose Set up two-factor authentication and confirm your password. You can also get there from My account → Two-factor authentication.

   Where to find it

   1. Settings
   2. Security Settings
2. 2

   Step 2: Scan the QR code

   Scan the QR code with your authenticator app, or type the key shown under Can’t scan the code?. Enter the 6-digit code the app shows and choose Turn on.

3. 3

   Step 3: Save your recovery codes

   You get 10 recovery codes. Copy or Download them and keep them somewhere safe, such as a password manager. They are shown only once, and each works once.

   Note: We email you whenever two-factor authentication is turned on or off, or a recovery code is used to sign in.

4. 4

   Step 4: Sign in with a code

   After your email and password, enter the current code from your app and choose Verify and sign in. The sign-in step expires after 5 minutes, and each code can be used only once.

5. 5

   Step 5: Manage two-factor authentication

   Choose New recovery codes (needs a current code) to replace all your recovery codes, or Turn off (needs your password and a current code or a recovery code).

If you lose your phone

1. 1

   Step 1: Sign in with a recovery code

   After your password, choose Use a recovery code and enter one of your saved codes. Then set up your new phone: turn two-factor authentication off and on again, or generate new recovery codes.

If you forget your password

1. 1

   Step 1: Request a reset link

   On the sign-in page, choose Forgot password?, enter your Email and choose Send reset link. The link expires in 30 minutes.

2. 2

   Step 2: Choose a new password

   Open the link, enter the new password twice and choose Change password. You are signed out on all devices; sign in again with the new password. If two-factor authentication is on, you still need a code from your app or a recovery code.