Security: password and sessions
Set or change your password, see where you are signed in, sign out one device, or sign out everywhere.
#What it is
The Security screen has two groups. Password lets you set or change your password. Active sessions lists the devices signed in to your account and lets you sign them out. There is no two-factor authentication setting yet.
#Who can use it
Everyone. Free and Pro accounts have the same Security screen. The code puts no plan limit on it.
#Cost
Free, no credits. Nothing on this screen uses credits.
#Where to find it
Open Settings from the account menu at the bottom of the sidebar, then Security. You can also search the settings menu for "password", "sessions", "devices" or "sign out".
#Buttons and controls
| # | Name in the app | What it does | Plan |
|---|---|---|---|
| 1 | Password / No password set | The title of the first row. It says No password set if you sign in with an email code or Google only. | Both |
| 2 | Change password | Opens the password form. If you have no password the same button is named Set password. | Both |
| 3 | Current password | Your present password. It shows only when you already have a password. | Both |
| 4 | New password | The password you want. A bar and a checklist show how strong it is: 8+ characters, Upper & lower case, A number, A symbol. | Both |
| 5 | Confirm password | Type the new password again. It says "Passwords match" or "Passwords do not match". | Both |
| 6 | Change password (submit) | Saves the change. Named Set password if you have none. It stays off until both boxes are filled. | Both |
| 7 | Cancel | Closes the form and clears the boxes. | Both |
| 8 | Active sessions | The title of the second group, with the number of sessions after it. | Both |
| 9 | This device | A tag with a green dot on the session you are using now. | Both |
| 10 | Sign out | Ends that one session. It shows on every session except this device. | Both |
| Show all N sessions | Shows the whole list. It shows only when you have more than 5 sessions. It turns into Show fewer. | Both | |
| 11 | Sign out everywhere | Ends every session, including this one, then takes you to the sign in screen. | Both |
#How to set a password
- Open Settings, then Security.
- If it says No password set, choose Set password.
- Type a New password and type it again in Confirm password.
- Choose Set password. You see "Password set."
#How to change your password
- Open Settings, then Security.
- Choose Change password.
- Fill in Current password, New password and Confirm password.
- Choose Change password. You see "Password changed. Other devices were signed out."
#How to sign out a device
- In Active sessions, find the device.
- Choose Sign out on its row. You see "Signed out of that device."
#How to sign out everywhere
- In Active sessions, choose Sign out everywhere.
- You are taken to the sign in screen. Every device, including this one, needs a new sign in.
#Options explained
Each session row shows the browser and system (for example Chrome on macOS), and when known the country, the network address and "Active" with a time. A phone shows a phone icon.
The new password checklist on the screen asks for 8 or more characters, upper and lower case, a number and a symbol. The password also has to pass the server. The server wants at least one capital letter, one number and one of these symbols: ! @ # $ % ^ & *. A symbol outside that list can pass the checklist and still be refused.
If you forgot your password, use "Forgot password" on the sign in screen. See Create an account and sign in.
#Limits
- A password needs at least 8 characters.
- The first 5 sessions show before Show all. The session you are using is always listed first.
- A session lasts up to 180 days.
- After 10 wrong password attempts the account is locked for 30 minutes at sign in.
#When something goes wrong
| Message in the app | What it means | What to do |
|---|---|---|
| Enter your current password. | You left Current password empty. | Type it. |
| Passwords do not match. | The two new password boxes differ. | Retype them. |
| Use 8+ characters with upper and lower case, a number and a symbol. | The new password fails the checklist. | Make it stronger. |
| Current password is incorrect. | The current password is wrong. | Retype it. |
| New password must contain at least 1 uppercase letter, 1 number, and 1 special character | The server refused the new password. | Add a capital letter, a number and one of ! @ # $ % ^ & *. |
| Password must be at least 8 characters with 1 uppercase, 1 number, and 1 special character | The server refused the password you tried to set. | The same fix. |
| Password is already set. Use change-password instead. | You already have a password. | Use Change password. |
| Signed out of that device. | The session ended. This is a confirmation. | Nothing to do. |
| Could not sign out that device. | The sign out failed. | Try again. |
| No active sessions found. | The list is empty. | Reload the page. |
#Questions
#Can I turn on two-factor authentication?
Not yet. There is no two-factor setting in the app today. To keep your account safe, use a strong password, check Active sessions for devices you do not know, and choose Sign out everywhere if anything looks wrong.
#Will changing my password sign me out?
The notice reads "Password changed. Other devices were signed out." In practice the server ends every saved sign in for your account, this device included. Plan to sign in again the next time the app asks.
#I signed up with Google. Can I add a password?
Yes. The row says No password set. Choose Set password.
#Do I need a password to change my email?
Yes. Changing the email asks for your current password. Set one here first.
#Does Sign out everywhere sign me out too?
Yes. It ends every session, including the one you are on.
#Why do I see a device I do not know?
Choose Sign out on that row, then change your password. Changing it ends your saved sign ins.
#What counts as a good enough password?
The screen wants all four checks green: 8 or more characters, upper and lower case, a number and a symbol. The server then checks again that there is a capital letter, a number and one of ! @ # $ % ^ & *.
Last checked against the app on . View as Markdown