A few steps keep your account secure.
Passwords & sign-in
- Use a strong, unique password, or sign in with Google.
- Sessions are cookie-based; sign out on shared devices.
Two-factor authentication (2FA)
- Enable TOTP-based 2FA in Settings — scan the QR code with an authenticator app.
- Once enabled, every login (password and Google) is challenged for a 6-digit code.
- 2FA is enforced server-side, so a valid session isn't granted until the code is verified.