Account
Account and security
Two-factor authentication, sessions, your data and deleting your account.
Two-factor authentication
Turn it on
In Account settings → Security, scan the QR code with an authenticator app (or enter the key) and confirm a 6-digit code.
Save your recovery codes
You get 10 one-time codes. Regenerating them makes the old ones stop working.
Sign in
After your password, enter a code from the app or a recovery code.
Turning two-factor off needs a code or recovery code.
Passwords and sessions
- Reset links work for 30 minutes. Changing your password signs out your other devices.
- Signed up with a social account? Use Set a password to add one.
- Active sessions lists where you're signed in; Sign out others ends the rest.
Your data and deleting your account
- Your data in Profile downloads a JSON export of your account.
- Delete account starts a 30-day grace period. Workspaces you share with others need a new owner first.
More on how we protect your data is on the security page.