Account security & 2FA

Overview

The Security page protects your account. You can change your password, enable two-factor authentication (authenticator app or email code) with downloadable recovery codes, see every device you are signed in on, and start account deletion with a 30-day safety freeze.

Step-by-step guide

1. Open Dashboard → Security.
2. Under Change password, enter your current password and a new one, then Save.
3. Under Two-factor authentication, choose Authenticator app (scan the QR with Google Authenticator/Authy) or Email code. Save your recovery codes — they are shown once; use Download to keep them safe.
4. Under Devices & sessions, review where you are signed in. Use Sign out on a device, or Sign out others to end all other sessions.
5. Your account may enforce a device limit; if you are blocked on a new device, sign out elsewhere first.
6. The Danger zone starts account deletion — it triggers a 30-day freeze during which you can restore by logging in.

Common mistakes

• Enabling 2FA but not saving the recovery codes — without them a lost phone can lock you out.
• Ignoring unfamiliar devices in the sessions list; sign them out and change your password if anything looks wrong.
• Assuming deletion is instant — it is a 30-day freeze first, then finalisation.

Best practices

• Use an authenticator app rather than email codes where possible.
• Re-check your devices list periodically and after travelling.
• Use a unique, strong password and a password manager.