Skip to main content
Start free
All articles

Account and billing

Account, password and two-factor sign-in

Change your email or password, turn on two-factor sign-in and manage where you are signed in.

Settings → Account holds your profile and how you sign in. Settings → Security holds two-factor sign-in, sessions and access tokens.

Change your email

  1. Open Settings, then Account. Under Sign-in, choose Change email.
  2. Enter the new address and your current password, then choose Send confirmation link.
  3. Open the link in the e-mail to the new address while you are signed in. It expires in one hour, and your email stays the same until then.

Change your password

  1. Open Settings, then Account, and choose Change password under Sign-in.
  2. Enter your current password, then the new one twice. Use at least 8 characters.
  3. Leave Sign out my other devices on to end the sessions on your other devices. You stay signed in where you are.
  4. Choose Update password.

Forgot your password? On the sign-in page, choose Forgot password? and enter your email. The reset link expires in one hour.

Turn on two-factor sign-in

Two-factor sign-in asks for a code from your authenticator app after your password.

  1. Open Settings, then Security. Next to Set up two-factor, choose Set up.
  2. Scan the QR code with your authenticator app, or enter the key by hand. Choose time-based if the app asks.
  3. Enter the 6-digit code the app shows and choose Turn on.
  4. Save your recovery codes: copy or download them. If you lose your phone, each code signs you in once. They are shown only this time.
  5. Choose I saved my recovery codes, then Done.

Tip: Keep the recovery codes somewhere safe, such as a password manager. Under Security you can create New recovery codes; the old codes then stop working.

To turn two-factor sign-in off, choose Turn off and enter your current password and a code from your app or a recovery code. Turning it off makes your password the only thing protecting this account.

Sessions

You stay signed in on a device for up to 7 days. If you lost a device or shared your password, open Settings → Security and choose Sign out everywhere. Every browser and device, including the one you are using, then needs to sign in again.

Access tokens

An access token lets the browser extension save to your library without depending on a browser sign-in. You create one under Settings → Extension. Tokens are stored hashed and shown only once.

Settings → Security lists your access tokens. You can revoke a token at any time; anything using it stops working immediately.

Last updated: