Security Settings

Security settings

Quick Summary: Protect your account with a password and additional verification methods at sign-in.

Overview

Security Settings is where you verify your identity and manage methods used during sign-in. Two-factor authentication (2FA) adds a verification step after your password. Any active method makes that step part of your next sign-in.

From the username menu, select Account Management, then Security Settings.

The page asks for your account password before it shows or changes verification methods. A new method becomes active only after you complete its code or browser registration.

Quick start

1. Open Security Settings using the path in Overview.
2. Select Verify Identity.
3. Enter your account password and select Verify.
4. Under Manage your verification methods, choose a method and select its plus icon.
5. Complete the on-screen verification.
6. Confirm the method appears in your list.

The completed method is active and available at your next sign-in. At sign-in, enter your password, then complete verification with an active method offered.

Common workflows

Workflow: Enable 2FA for the first time

Use the Quick start steps above. Choose the method that fits your devices. The first successfully verified method turns on 2FA for your account.

Workflow: Add a backup 2FA method

Choose a different method in Detailed guide and complete its verification. Use any active method offered when you sign in.

Workflow: Remove a 2FA method

Use the trash icon beside the method and confirm the removal. At least one active method must remain, so you cannot remove the last one.

Detailed guide

The sections below explain password changes, each verification method, and method management.

Changing your password

On Security Settings, select Change Password.

In the Change Password dialog, complete Current password, New password, and Confirm new password. Select Change Password.

Tip: Use at least 12 characters. Avoid a common password, an entirely numeric password, or one similar to your account details.

Two-factor authentication (2FA)

Authenticator app

The page lists this option as One Time Password Generator.

1. Select the plus icon beside One Time Password Generator.
2. In Connect an Authenticator App, scan the QR code with your authenticator app.
3. If scanning fails, select I can’t scan the QR code and enter the setup key.
4. Enter the Verification Code from the app.
5. Enter a Verifier Name.
6. Select Connect.

The method becomes active only after the app code is accepted.

Biometric authentication and security keys (WebAuthn)

The page lists this option as Biometric Authentication & Security Keys. It works with a built-in authenticator or a security key supported by your browser.

1. Select the plus icon beside Biometric Authentication & Security Keys.
2. Enter a Verifier Name.
3. Select Register.
4. Complete the browser prompt with your built-in authenticator or security key.

The method becomes active after registration succeeds.

Email verification

The page lists this option as Verification by Email.

1. Select the plus icon beside Verification by Email.
2. In Verification by Email, enter the code sent to your account email.
3. Select Verify.

The method becomes active after the code is accepted. Email delivery can be delayed or blocked by filters.

Managing verification methods

After you verify your identity, the list shows active methods. Use the pencil icon beside an authenticator app or security key to change its Verifier Name.

Use the trash icon to remove a method, then confirm the removal. If removal is blocked, the account requires at least one active method. Add and verify another method before removing the old one.

You can register multiple authenticator apps and security keys. One Verification by Email method can be active at a time. An unfinished setup is not active and does not appear as a usable method.

Troubleshooting

Related Documentation

• User Management
• Account Preferences