Account and security

The account is managed on the site: sign in and open your account, which has three tabs — “Overview”, “Team” and “Security”. From the app, Settings › Account › Manage Account… opens that page in your browser.

Change it

On “Security”, with your current password. Your other devices are signed out.

Forgot it

On the sign-in page of the site, ask for a reset link. It comes by email, works once and expires in 1 hour. Setting the new password signs out every device; two-factor authentication stays on.

To change the address, enter the new one on “Security”: a code is sent to it and works for 30 minutes. After the change your other devices are signed out, and you sign in with the new address.

With it on, signing in takes your password and a six-digit code from an authenticator app.

1. On “Security”, start the setup of two-factor authentication.
2. Scan the QR code with an authenticator app — any app that makes time-based codes will do.
3. Type the code the app shows to turn it on.
4. Save the 10 backup codes that appear. They are shown once.

• A backup code works in place of a code from the app, once each — for the day the phone is not at hand.
• A new set of backup codes can be made on the same page.
• Turning two-factor authentication off takes your password and a code.

The app asks for the code too: after the password the sign-in sheet shows Enter Your Two-Factor Code.

“Security” lists where the account is signed in — the app on each computer and the site in each browser — with the time each was last active. Sign out any one of them, or all the others at once.

The same tab keeps the sign-ins of the last 90 days, successful and failed, and two switches for letters — both on by default:

• a letter when the account is signed in from a new address;
• a letter after several failed attempts to sign in.

“Overview” has the export of everything stored for the account, and the deletion of the account. Both are described in Where your data lives.