What this page is for
This page holds your own security settings: your password and two-step verification. Changes here affect only you, in every organisation you belong to.
Who can use it
Every signed-in person, for their own account. Nobody can open another person's security page.
How to change your password
- Enter your current password.
- Enter a new password and type it again.
- Select Change password.
How to turn on two-step verification
- Install an authenticator app on your phone if you don't have one (Google Authenticator, Microsoft Authenticator, 1Password and others work).
- Select Turn on two-step verification. You may be asked for your password first.
- Scan the QR code with the app.
- Type the 6-digit code the app shows and select Confirm and turn on.
- Save your recovery codes somewhere safe, such as a password manager. They are your way in if you lose your phone, and they are shown only once.
How to turn it off or get new recovery codes
- New recovery codes replaces your recovery codes. The old ones stop working.
- Turn off removes two-step verification. You are asked for your password first.
Fields and columns
| Field | What to enter | Rules |
|---|---|---|
| Current password | Your current password | Must be correct. |
| New password | Your new password | At least 10 characters, with letters and numbers, different from the current one. |
| Type the new password again | The same password | Must match. |
| 6-digit code | The code from your authenticator app | Changes every 30 seconds. |
Statuses and automation
- Off: you sign in with your password only.
- Waiting for confirmation: you scanned (or are about to scan) the QR code but haven't entered a code yet. It is not active until you confirm.
- On: every sign-in also asks for a code.
- Password changes and two-step changes are recorded in the change history and the sign-in activity log, without the secrets themselves.
Settings that change this page
None. Each person controls their own security settings.
FAQs
Is two-step verification required? Not at the moment, but it is strongly recommended, especially for administrators and finance staff.
Can my administrator see my recovery codes? No.
Troubleshooting
| Problem | What to do |
|---|---|
| "The provided two factor authentication code was invalid." | Check your phone's time is set automatically, then use the newest code. |
| The QR code won't scan | Zoom the page in, or move the phone further away. |
| "The current password is not correct." | Type your current password carefully. If you forgot it, sign out and use Forgot your password. |