Security
Security is where you protect your account and control who can get into it. The Password tab changes the password you sign in with, guided by a live strength check; the Two-factor tab adds a second step at sign-in by email, SMS or an authenticator app, with recovery codes and remembered-browser management; the Sessions tab shows every device signed in and lets you sign the others out. Turning on two-factor is the single biggest step you can take to keep the account safe.
Change Password
Change the password you use to sign in, after confirming your current one so we know it is you. The strength bar and checklist guide you to a strong new password, and the confirm field catches a typo before you save. Saving signs you out on your other devices and clears any remembered browsers, so two-factor is required on them again.
Passwords must meet all requirements below. You'll be asked to sign in again after updating.
Two-Factor Authentication
Require a verification code in addition to your password when signing in, by email, SMS or an authenticator app — the single biggest thing you can do to protect your account. The master toggle turns two-factor on once at least one method is added, and one method is always marked primary and used at sign-in. Generate recovery codes to get back in if you lose a method, and use Remembered browsers to review and forget the devices that currently skip the code.
2FA must have at least one method to be enabled. One method is always designated as primary and used at sign-in.
Active Sessions
Every device currently signed in to your account, so you can spot anything you do not recognise. Each entry shows the device or browser and when it was last active, with your current session marked. Use Sign out all other devices to end every other session at once — handy after signing in on a shared or lost device.