Passwords, two-step and passkeys
Ways to keep your account safe, and what to do if you're locked out.
All of these are in Account.
Your password
Choose Change password to set a new one. Use something long that you don't use anywhere else. A short phrase of a few words is easy to remember and hard to guess.
Forgotten it? On the log-in page, choose Forgot your password? and we'll email you a link. It works once, and signs you out on your other devices.
Two-step verification
With two-step verification on, logging in needs your password and a 6-digit code from an authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password.
- Choose Turn on two-step verification.
- Scan the code with your authenticator app, or type in the key shown.
- Enter the 6-digit code the app shows.
- Save your recovery codes somewhere safe. Each one lets you in once if you lose your phone.
Passkeys
A passkey lets you log in with your fingerprint, face or device PIN instead of a password. Add one from Your passkeys. Logging in with a passkey skips the two-step code, because a passkey is already two steps in one.
Tip: If you only do one thing, turn on two-step verification or add a passkey.