Account → Security & sign-in in Settings is where you control who can be you: your password, two-factor authentication, and every session currently signed in with your account.
Change your password
Changing your password does more than update a credential: "Active sessions are revoked after a successful change". Every other device is signed out immediately, which makes a password change the fastest way to shut out anyone who should no longer have access.
Two-factor authentication
Use any standard authenticator app.
- 1
In Security, start MFA enrollment. The dialog prompts "Scan with your authenticator app" — scan the QR code with your app of choice.
- 2
Optionally give the device a "Device label" so you can tell your phone from your backup device later.
- 3
Enter the "Confirmation code" your app generates to prove the pairing worked.
- 4
"Save your recovery codes" somewhere safe. They are your way back in if you lose the device.
Once enrolled, signing in adds a Two-factor authentication challenge: enter the "Code" from your app and click "Verify and sign in".
You can remove a device or generate fresh recovery codes later. Removing a device asks for your password, so nobody sitting at an open session of yours can quietly turn two-factor off.
Active Sessions
The Active Sessions panel lists everywhere your account is signed in. Refresh it to see the current picture, and use the sign-out-all-others action when anything looks unfamiliar: "All other active sessions will be revoked and required to sign in again." Only the session you are using survives.
Email verification at signup
Every new account verifies its email first: enter the code Tamaat sends you and click "Verify email", or ask for another if it doesn’t arrive. A mistyped address simply never gets in.