Security and Sign-in

The Security tab holds everything that protects how you sign in: your password, two-factor authentication with an authenticator app, and passkeys. All three live on one tab, side by side on a wide screen and stacked on a narrow one.

View full image

Sidebar

Security (under Account)

Address

/dashboard/settings?tab=security

Layout

Three sections (side by side from about 1000 pixels of content width, stacked below that)

Change your password

The Password section reads “Change the password you use to sign in. We’ll email a security alert when it changes.”

1. Open Account → Security in the sidebar.
2. In Current password, type your existing password.
3. In New password, type the new one. The hint under the fields states the rule: “At least 8 characters, with at least one letter and one number.”
4. In Confirm new password, type it again.
5. Click Update password.

Each field has an eye button on its right edge. Hover it for “Show password” or “Hide password” and click it to reveal or hide what you typed.

On success the fields clear, the page says “Password updated. Sign in again with your new password.”, and about a second and a half later you are taken to the sign-in page. You also receive a security alert email for the password change and one for the sessions that were ended.

If the form refuses

Two-factor authentication

The Two-factor authentication section reads “Add an extra layer of security to your account.” A small table shows Status (Off or Enabled) and Method (None or Authenticator app). The same state appears as the Two-factor readout at the top of the Settings page.

Two-factor authentication here uses a 6-digit code from an authenticator app. The section suggests “Google Authenticator, Authy, or 1Password” as examples.

Turn it on

1. Install an authenticator app on your phone.
2. Open Account → Security and, in the Two-factor authentication section, click Enable 2FA.
3. Under Step 1: Scan the QR code, scan the code with your authenticator app. If you cannot scan it, use the Manual setup box underneath and type the secret key it shows into the app instead.
4. Under Step 2: Enter the code, type the 6-digit code your app now shows. Verify & enable stays disabled until you have typed six digits.
5. Click Verify & enable.

The page says “2FA enabled. Sign in again with your authenticator code.” and signs you out. From then on, sign-in asks for an Authentication code after your password. You receive a security alert email that two-factor authentication was enabled.

Click Cancel at any point before verifying to discard the set-up without changing anything.

View full image

Turn it off

1. Open Account → Security. With two-factor authentication on, the section says “Two-factor authentication is currently enabled on your account.”
2. Click the red Disable 2FA button.
3. Read the warning: “Disabling two-factor authentication will make your account less secure.”
4. Type Your password (shown only when your account has a password) and your current 6-digit code under Enter your 2FA code to confirm.
5. Click Confirm disable 2FA, or Cancel to keep it on.

The page says “Two-factor authentication has been disabled. Sign in again to continue.” and signs you out. You receive a security alert email.

Move to a new phone or authenticator

There is one way to replace an authenticator: turn two-factor authentication off, then turn it on again and scan the new QR code. The portal refuses to enrol a new authenticator while one is still active.

Wrong codes

Five wrong codes within 15 minutes, counted across turning it on and turning it off together, make the portal answer “Too many attempts. Try again in a few minutes.” Your account is not locked; the attempts simply resume once the window passes.

Passkeys

A passkey lets you sign in with Face ID, Touch ID, Windows Hello, a device PIN or a hardware security key, with no password to type. The Passkeys section reads “Sign in faster and more securely with passkeys (Face ID, Touch ID, Windows Hello, or hardware keys).”

Register a passkey

1. Open Account → Security. With no passkeys, the section shows No passkeys registered. Click Register your first passkey. If you already have passkeys, click Add another passkey under the list.
2. In the Register a new passkey window, optionally type a Device name such as “MacBook Pro” so you can recognize it later.
3. Click Register passkey. Your browser or device then asks you to confirm with its biometric check, PIN or security key.

When the device accepts it, the window closes and “Passkey registered successfully!” appears. If you dismiss your device’s prompt, the portal says “Registration cancelled” and nothing is added. You receive a security alert email whenever a passkey is added.

Manage your passkeys

Each passkey is one row in a list headed by a count such as “2 passkeys”. A row shows:

• The name you gave it, or Unnamed passkey, and a Synced chip if the passkey is backed up through your device’s cloud.
• Created with a date, and either Last used with a date and how many times it has been used, or Never used in amber.

At the right of each row are two buttons:

• Rename passkey (the pencil) turns the name into a text box. Type a new name and click Save, or press Enter. Cancel, or Escape, leaves it as it was. An empty name is refused.
• Delete passkey (the red bin) asks your browser to confirm with “Are you sure you want to delete “name”?”. Confirm and the passkey is gone. You receive a security alert email.

Sign in with a passkey

On the sign-in page, click Sign in with Passkey and confirm with your device. If it does not complete, the page says “Passkey sign-in did not complete. Try again, or sign in with your password.”

Troubleshooting

Best practices

FAQ

Related pages