Account Security

Account security settings are personal — they apply to your account, not your organization. Access them from the user menu in the bottom-left sidebar, then Security.

Two-factor authentication (2FA)

Two-factor authentication requires a one-time code from an authenticator app (TOTP) in addition to your password at sign-in.

Enable 2FA

1. Go to Account → Security.
2. Select Enable two-factor authentication.
3. Enter your current password to confirm your identity.
4. Scan the QR code with an authenticator app (e.g., Google Authenticator, 1Password, Authy).
5. Enter the six-digit code from the app to verify the setup.
6. Save your backup codes in a secure location. These are shown once and are used to recover your account if you lose access to your authenticator app.

Disable 2FA

1. Go to Account → Security.
2. Select Disable two-factor authentication.
3. Enter your current password to confirm.

Passkeys

Passkeys let you sign in with biometrics or a hardware security key instead of a password. They are phishing-resistant and faster than password-based login.

Add a passkey

1. Go to Account → Security.
2. Select Add passkey.
3. Follow your browser or device prompt to register a fingerprint, Face ID, or hardware key.

The passkey name is derived from your device type and shown in the passkeys list.

Delete a passkey

1. Go to Account → Security.
2. Find the passkey in the list and select Delete.

Deleting a passkey means you can no longer use that device or key to sign in with passkey authentication.