This article covers your password, two-factor authentication, backup codes and the devices signed in to your account. All of it is under Settings › Security.
Change or reset your password
- Under Password, select Change password.
- Enter your Current password and a New password of 10 to 128 characters. Passwords found in known data breaches are refused.
- Select Save password. Your other devices are signed out.
Forgot it? On the sign-in page, select Forgot password?, enter your email address and select Send reset link. The link works once, for one hour, and saving a new password with it signs out every session. If you signed up with Google, you see Set a password instead, so you can also sign in with your email address.
Turn on two-factor authentication
With two-factor authentication, every sign-in asks for a code from an authenticator app on top of your password.
- Under Two-factor authentication, select Turn on, confirm your password and select Continue.
- Scan the QR code with your authenticator app. If you can’t, select Copy key and enter the key in the app.
- Enter the 6-digit Code from the app and select Verify and turn on.
- Save your backup codes with Copy codes or Download, then select I have saved my codes.
You get 10 backup codes of 10 characters each. Each works once, for when you can’t use your app, and they’re shown only at this step. New backup codes creates a fresh set; the old codes stop working at once. Turn off asks for your password only.
Sign in with a code
After your password, or after Google, enter the 6-digit code and select Verify. Check Trust this browser for 30 days to skip the code in that browser for 30 days; leave it unchecked on a shared or public computer. Use a backup code switches to a backup code. The step is valid for 10 minutes.
If you have lost both your device and your backup codes, write to us through the contact page from the email address of your account.
Devices and signing out
Signed-in devices lists the browsers and devices signed in to your account, with when each was last active. Select Sign out beside one you don’t recognize, or Sign out all other devices. Signing in from a new device also sends you an email. To sign out where you are, open the account menu in the side rail and select Sign out. A session otherwise lasts 30 days and renews while you use it.
Related: Delete a workspace or your account, and how Sizewright protects your data on the security page.