Skip to main content

​
Password

At least 8 characters. A change sends you a confirmation email; if you get one you did not ask for, treat it as a signal and contact support.

​
Two-factor authentication

1

Scan the QR code

With any authenticator app. The code can also be entered manually if you cannot scan.
2

Verify

Enter the six-digit code the app shows.
3

Save the backup codes

A set of one-time codes is issued. They are shown once.
After that, signing in asks for a code from the app — or one backup code, which then stops working.
Store the backup codes somewhere that is not the phone running the authenticator. Losing both means an account you cannot sign into, and recovering it is a support conversation rather than a form.

​
Turning it off

Disable 2FA asks for your password and a current code. Both, because either alone is what an attacker with half your credentials already has.

​
What a block looks like

An administrator can block an account. Sign-in then reports “Account is locked. Contact support.” and every open session is invalidated. It is not something you can reverse from this screen — see Deactivate or delete for how a block differs from an exit you chose.
Last modified on August 31, 2026