Account Security and Two-Factor Authentication
Protect sessions, passwords, two-factor authentication, connected accounts, and notification preferences.
Use a unique password
Use a password manager and a unique password. Reset or change it promptly if you suspect compromise.
Enable two-factor authentication
Enable 2FA from Account Settings, store recovery codes securely, and do not share one-time codes with support or any third party.
Review access
Review connected accounts, active credentials, SSH keys, API keys, and notification preferences. Revoke items you no longer recognize.
Report concerns
Contact support with account context, but never include a password, API key, recovery code, or private key.
Published · Updated