Sign-in & security

Ways to sign in

• Email and password, with email verification at sign-up.
• Google sign-in. An account created with Google doesn’t need a password at all.

Two-factor authentication

Add a second factor with any authenticator app (TOTP):

1. Enable two-factor in your account settings and scan the QR code with your app.
2. Save the recovery codes somewhere safe. Each works exactly once, for when you lose your phone.
3. From then on, signing in asks for the 6-digit code from your app.

You can regenerate recovery codes later, which invalidates the old set.

Sessions

Signing out ends your session. If you suspect your account is compromised, change your password and regenerate recovery codes.