Secure your account
Everything on this page is under Access & security, on the Sign-in & security tab of the console.
The other ways to sign in that we offer have a page of their own.
Two-step verification
- Choose Set up two-step verification and scan the QR code with an authenticator app, or enter the key by hand.
- Type the six digits the app shows and choose Turn on two-step verification.
- Save the recovery codes somewhere safe. They are shown once. Each code works once, for when you do not have your phone: choose Use a recovery code when signing in.
From then on signing in asks for a code from the app. You can make new recovery codes at any time with your current password and New recovery codes; the old ones stop working.
Sessions
The Sessions panel lists where your account is signed in, with the moment and the address. Choose Sign out next to a session you do not recognise, or Sign out all other sessions, and change your password.
Password
Use a long passphrase that you use nowhere else. Change it under Password with your current password; every other session is then signed out. If you forgot it, choose Forgot password? on the sign-in page. The link in the e-mail works once and for 60 minutes.
What we never ask
We never ask for your password, a code from your authenticator app or an identity document, not by e-mail and not in a ticket.