Change your password and turn on two-factor
Change or set your password, add an authenticator app as a second factor, and sign out devices you don't recognise.
Account › Sign-in & security holds your password, your second factor and the devices signed in as you. Changes take effect immediately, everywhere you're signed in. The account menu in the top bar reaches it as Security.
Change your password
- In the Password card, select Change password.
- Enter your Current password, then your new one in New password and New password again. It needs at least eight characters.
- Select Change password. The card confirms Password updated.
Every other device signed in as you is signed out, so a password someone else may know stops working for them straight away. If you sign in through another provider and have no password, the card offers Set a password instead, which gives you a second way in.
Turn on two-factor authentication
Two-factor asks for a six-digit code from an authenticator app on your phone after your password, every time you sign in.
- In Two-factor authentication, which shows Off, select Set up.
- Add the key shown to your authenticator app. On a phone, Open in an authenticator app on this device adds it for you. The key is shown only this once.
- Type the code the app gives you into Code from the app and select Turn on two-factor.
- Keep the codes listed under Save your backup codes somewhere safe. Each one works once, if you lose your phone, and they're never shown again.
The card then shows On. Admins can see whether each member has two-factor on, in the member's details under Settings › Members, but they can't turn it on or off for you.
Turn two-factor off
Select Turn off, then Turn it off in the dialog. That removes the authenticator app and the backup codes, and your password alone signs you in. Setting two-factor up again gives you a new key and new codes.
Sign out a device
Where you are signed in lists every browser signed in as you, with its Device, Where and when it was Last active. The one you're using is tagged This device.
To end another one, select Sign out on its row, then Sign it out. That browser is signed out the next time it asks for a page, and needs your password, or the provider it used, to come back.
If you don't recognise a device, change your password as well: that signs out every other device at once.
What isn't in the audit log
Changes to your own account, such as your password, your second factor and your devices, aren't written to your workspace's audit log. What you do to the workspace is recorded there, under your name.


