Password, passkeys and two-factor

All of this lives under Settings → Security.

Resetting your password

If you are signed in, change it directly under Settings → Security. You will be asked for your current password first.

If you cannot sign in:

1. Choose Forgot password on the sign-in page.
2. Enter the email address on your account.
3. Follow the link we send you and choose a new password.

The link is single-use and expires after a short period. Requesting a new one invalidates any earlier link. If nothing arrives, check your spam folder and confirm you used the address the account was created with — for security we show the same confirmation message whether or not an account exists.

Passkeys

A passkey signs you in with your device's fingerprint, face or screen lock. It cannot be phished and there is nothing to remember.

Add one under Settings → Security → Passkeys. You can register several — one per device is common — and remove any of them individually. Removing a passkey does not sign that device out; end the session too if that is what you intended.

Two-factor authentication

Two-factor authentication asks for a six-digit code from an authenticator app in addition to your password.

1. Go to Settings → Security and start the two-factor setup.
2. Scan the QR code with your authenticator app.
3. Enter the current code to confirm the app is in sync.
4. Save your recovery codes. They are shown once. Without them, losing your authenticator means losing access to the account.

Active sessions

Settings → Security lists where you are currently signed in. Ending a session signs that device out immediately — the thing to do if you have signed in on a device you no longer control.