Protect your account

Use a unique password and keep your verified account email accessible. Use Password recovery to change a forgotten password.

In Account security, set up an authenticator and verify its six-digit code. Keep that authenticator; an email link does not bypass it.

Sign out other sessions when you no longer trust a device. Issued access tokens can remain valid until expiry. Never send passwords, setup keys or codes to support.