Knowledge baseAccount
Account and security
Sign-in codes, your password, two-factor authentication with backup codes, and automatic sign-out.
On this page
Signing in
An account is an email and a password (at least 8 characters). Every sign-in has a second step:
- Without an authenticator app — a 6-digit code comes to your email. It is valid for 10 minutes, and 5 wrong tries use it up; request a new one on the same page. The form sends itself as soon as all six digits are in.
- With two-factor authentication — a code from the app instead of the email code, or one of the backup codes.
Registration works the same way: after the form, a code comes to your email to confirm it.
The account page
The gear in the header opens Account settings: your email, your plan with what it includes (and Renew or Upgrade to Paid, which lead to the plan card on Overview), the password, two-factor authentication and a test email.
Change your password
- On the account page, in the Password row, press Change password, type the new password (at least 8 characters, not the current one) and press Change password in the form that opens.
- A confirmation code comes to your email; enter it on the next page.
The password changes only after the code, so nobody can change it from a session left open on someone else's computer. A notice about the change comes by email.
Forgot your password
- On the login page press Forgot your password? and enter your email.
- If the account exists, a code comes to that email (the page says the same either way, so it doesn't reveal who is registered).
- Enter the code and a new password. You're logged in — but if two-factor authentication is on, the app code is asked for as well: a reset by email doesn't bypass it.
Two-factor authentication
With two-factor authentication, signing in takes a code from an authenticator app (Google Authenticator, Authy and others) instead of a code from your email. It is an independent factor: someone who gets into your mailbox still can't sign in.
Turn it on
- On the account page, next to Two-factor authentication, press Set up, then Connect an app.
- Scan the QR code with the app, or enter the key shown next to it by hand.
- Enter the 6-digit code from the app and press Confirm and turn on.
- Save the backup codes that appear (see below) and press I've saved the codes.
If the code isn't accepted, check that the time on your phone is set automatically: the codes depend on it.
Backup codes
Backup codes let you sign in when the phone with the app is lost. Each works once, and they are shown only once — write them down or keep them in a password manager. To get a new set, enter a code from the app under Regenerate backup codes and press New codes; the old codes stop working.
Turn it off
Under Turn off 2FA enter a code from the app or a backup code and press Turn off. From then on, sign-in asks for the email code again. A notice comes by email.
Lost the phone
- Sign in with a backup code instead of the app code.
- On the account page turn two-factor authentication off with another backup code, and set it up again on the new phone.
No phone and no backup codes — write to support from the account's email.
Automatic sign-out
After 30 minutes without activity you are signed out. The countdown in the header shows the time left (on narrow phone screens it is hidden); in the last minute it turns pink.
- Activity is opening pages and pressing buttons — not moving the mouse.
- The countdown is shared by all tabs: activity in one tab keeps the others signed in, and signing out in one signs out all.
- Pages that refresh themselves don't count as activity.
- After the sign-out the login page says why. Signing in takes you to Overview, not to the page you were on.
Interface language
The EN | RU switch in the header changes the language of the site and the dashboard. When you're logged in, the choice is saved to the account: it's used on every device you sign in from and for the emails we send you.
Test email delivery
On the account page, in the Email row, press Send a test email. If it doesn't arrive in a few minutes, look in the spam folder and add our address to your contacts — the sign-in codes come from the same address.