Editorial note: Goji.my may earn a commission if you subscribe through links in this article. This does not influence our independent rankings. Our methodology.
Overview
The Security page protects your account. You can change your password, enable two-factor authentication (authenticator app or email code) with downloadable recovery codes, see every device you are signed in on, and start account deletion with a 30-day safety freeze.
Step-by-step guide
- Open Dashboard → Security.
- Under Change password, enter your current password and a new one, then Save.
- Under Two-factor authentication, choose Authenticator app (scan the QR with Google Authenticator/Authy) or Email code. Save your recovery codes — they are shown once; use Download to keep them safe.
- Under Devices & sessions, review where you are signed in. Use Sign out on a device, or Sign out others to end all other sessions.
- Your account may enforce a device limit; if you are blocked on a new device, sign out elsewhere first.
- The Danger zone starts account deletion — it triggers a 30-day freeze during which you can restore by logging in.
Common mistakes
- Enabling 2FA but not saving the recovery codes — without them a lost phone can lock you out.
- Ignoring unfamiliar devices in the sessions list; sign them out and change your password if anything looks wrong.
- Assuming deletion is instant — it is a 30-day freeze first, then finalisation.
Best practices
- Use an authenticator app rather than email codes where possible.
- Re-check your devices list periodically and after travelling.
- Use a unique, strong password and a password manager.