Security
Password
Change your password with current, new, and confirm fields. A live checklist shows every rule at once: at least 8 characters, upper and lower case, a number, and that the new password is different from your current one; confirm must match. The update control stays disabled until every rule passes. Errors and success are shown on the page and as toasts.
The page shows when your password was last changed (relative wording), or that it has never been changed when there is no record.
Two-factor authentication (2FA)
Two-factor authentication adds an extra step when you log in: after your password, you enter a short code from an authenticator app on your phone (such as Google Authenticator or Authy). The page shows whether 2FA is currently on or off.
Set up opens a guided flow (QR code and a verification code). With 2FA on, you get recovery codes and can open View to see them. Disable 2FA is available when you need to turn it off; store recovery codes somewhere safe outside the product.
Active session
For security, you can only be signed in on two devices at the same time. If you sign in on a third device, the oldest session is signed out automatically. This section shows your current sign-in details so you can confirm it’s the device you expect.
You see the device type (for example desktop, phone, or tablet), a readable name, an Active label, operating system, browser, best-effort location (or unknown), and last active.
