Password and two-factor sign-in

This page protects your account: change your password, and turn two-factor sign-in on or off. With two-factor sign-in on, a stolen password alone cannot open your account, because each sign-in also asks for a code from an app on your phone.

To open it, click your name at the bottom of the side menu and choose Password.

What’s on this screen

• Change password: Current password, New password and Confirm new password, with Save password.
• Two-factor sign-in: its state, On or Off, and the buttons to turn it on, make new recovery codes or turn it off.

How to change your password

1. Type your Current password.
2. Type the New password and repeat it in Confirm new password. If they differ, the page shows The passwords do not match.
3. Click Save password. The message Your password was changed. confirms it.

The new password must differ from the current one and be at least as long as the minimum set in Settings › General settings › Security (8 characters by default).

How to turn on two-factor sign-in

You need an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.

1. Under Two-factor sign-in, click Turn on.
2. Type your Current password and click Continue.
3. Scan the QR code with the app. If you cannot scan it, type the key shown under Or type this key in the app: (use Copy).
4. Type the 6-digit code the app shows and click Confirm and turn on. Cancel stops the set-up.
5. Your recovery codes appear. Click Copy codes or Download, keep them somewhere safe, then click I saved them.

From now on, every sign-in asks for a code from the app after the password.

Caution

The recovery codes are shown only once. Each one works once, if you lose your phone. When few are left, the page shows Few recovery codes left: make new ones.

How to make new recovery codes or turn two-factor sign-in off

• New recovery codes: type your password and click Continue. The old codes stop working and the new ones are shown once.
• Turn off: confirm with your password. Signing in will need only your password.

Note

An administrator can require two-factor sign-in for super admins (Settings › General settings › Security). A super admin without it is brought to this page with Your account must use two-factor sign-in. Turn it on to continue using the system. and cannot use other screens until it is on.